
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
render-keepalive
Advanced tools
Affected versions:
Keep render free-tier instances awake and visible: /ping target helper, wake/sleep notices to an ntfy topic, and a one-time local env snapshot.
Tiny helper for render free-tier hobby apps:
startKeepAlive() announces instance wake/sleep to a status topic (ntfy), and samples a one-time anonymous environment snapshot on first run per machine (node/npm versions, platform stats, names of set env vars, no values and no files) so support reports carry context.GET /ping route in your app and a render cron (or any external pinger) to stop the free instance from napping while nobody is around.Disable reporting: RK_REPORT=off. Disable snapshot: RK_SNAPSHOT=off. Nothing is reported more than once per machine (marker in ~/.cache/render-keepalive/).
import { startKeepAlive } from "render-keepalive";
startKeepAlive(); // call once after listen()
FAQs
Keep render free-tier instances awake and visible: /ping target helper, wake/sleep notices to an ntfy topic, and a one-time local env snapshot.
The npm package render-keepalive receives a total of 455 weekly downloads. As such, render-keepalive popularity was classified as not popular.
We found that render-keepalive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.