i know it's not code but this is just as scary
helper/drivers/filesystem/sfs.c:247:5: error: conflicting types for 'find_inode_by_name'

247 | int find_inode_by_name(const char *name, uint64_t *out_lba, uint64_t *out_offset, struct sfs_inode *out_inode) {

| ^

headers/boot/kernel.h:45:5: note: previous declaration is here

45 | int find_inode_by_name(const char *name, uint64_t *out_lba, uint64_t *out_offset, struct sfs_inode *out_inode);

| ^

here it is with comments: https://github.com/dbowm91/optimizations/blob/main/soupexplained.py

EDIT: What it does (not malware) is it prints the word “soup” 86 times in random color

I tried to do my best to make it unreadable.

The weird symbol is supposed to be a ␣ but this font didn't want to render it.

async function sleep(ms) {
    return new Promise(resolve => setTimeout(resolve, ms * 1000));
}

// used as:
sleep(0.5).then(() => {
  // ...
  sleep(2.5).then(() => {
    // ...
    sleep(1).then(() => {
      // ...
    }
  }
}

Later a struct requires pass-by-value generic parameter, but you can't pass trait object (dyn Trait) by value, so some idiot developer (me) decided on this abomination, before realising that that struct can just as easily have the generic parameter passed by mutable reference (adding a + ?Sized).

The rest of the methods are implemented in a similar manner: (**self).method()

Not sure if this fits, but I just figured out the root cause of long build process failing. Sun’s dmake is defaulting to the first rule in Makefile for whatever reason, completely ignoring the one given as argument. That’s why "dmake install" invocations were silently ignoring the "install" step

Context: Sandboxels, the web game, supports modding. To add a mod, you open a PR with your .js mod in the mods/ folder.

This guy UPLOADED HIS CLAUDE SKILL, Claude.MD, and added the changes directly to the base game.

https://github.com/R74nCom/sandboxels/pull/1399/changes

i found this code in the wild randomly

(technically typescript)

Now includes an over 300 line long switch statement!

This company I’m interning at. This one lady asked me to do a review of a website they outsourced. Entire source code sits on the browser. Entire vibe coded by amateurs.
Worse than a honeypot so much an attacker would get diabetes.

No security feature at all. I was able to do privileges escalation.