When Staging and Production Share the Same Server: A War Story
A production server running Docker Swarm, 8 services, zero isolation. I was called in to set up staging. What I found, and what broke, is a textbook case of infrastructure debt.
React · TailwindCSS · Markdown · SEO · Content systems
A technical blog built from Markdown in Git, designed to ship fast, stay searchable, and sit in the same visual system as the original site.
rodrigo@oler:~$ blog status
articles: 19
focus: SEO, React, TailwindCSS, content systems
publish mode: static export
current pipeline: Markdown -> build -> sitemap/rss
- when-staging-and-production-share-the-same-server-a-war-story
- axios-compromised-how-the-2026-npm-supply-chain-attack-happened
- how-to-detect-and-remove-the-axios-malware-from-your-project
- how-to-protect-javascript-projects-against-supply-chain-attacks
Posts
19
Mode
Next.js
SEO
Static
RSS
On
Fresh articles, republished notes, and evergreen technical posts. The list is generated from Markdown at build time.
A production server running Docker Swarm, 8 services, zero isolation. I was called in to set up staging. What I found, and what broke, is a textbook case of infrastructure debt.
A detailed breakdown of the Axios compromise, the malicious npm releases, and the lessons teams should take from the incident.
A practical containment checklist for teams that may have installed the malicious Axios releases.
A practical set of defenses for JavaScript teams, based on lessons from the Axios incident.
A practical look at Pyth price feeds, Hermes, and how to expose them through a small Bun + TypeScript + Elysia REST API.
A recent Uniswap AI SDK announcement hints at a bigger shift: DeFi workflows may increasingly be executed by agents instead of humans clicking through interfaces.
Clusters that are easy to scan, easy to link, and easy to keep fresh.
A searchable archive with the same visual DNA as the original site.
May 28, 2026
A production server running Docker Swarm, 8 services, zero isolation. I was called in to set up staging. What I found, and what broke, is a textbook case of infrastructure debt.
March 31, 2026
A detailed breakdown of the Axios compromise, the malicious npm releases, and the lessons teams should take from the incident.
March 31, 2026
A practical containment checklist for teams that may have installed the malicious Axios releases.
March 31, 2026
A practical set of defenses for JavaScript teams, based on lessons from the Axios incident.