This is a recap of the top 10 posts on Hacker News on Apr 14, 2026.

Feel free to leave feedback on Github: https://github.com/denolfe/hacker-news-highlights

• (00:00) - Intro

Someone bought 30 WordPress plugins and planted a backdoor in all of them
https://anchor.host/someone-bought-30-wordpress-plugins-and-planted-a-backdoor-in-all-of-them/
https://news.ycombinator.com/item?id=47755629

GitHub Stacked PRs
https://github.github.com/gh-stack/
https://news.ycombinator.com/item?id=47757495

DaVinci Resolve – Photo
https://www.blackmagicdesign.com/products/davinciresolve/photo
https://news.ycombinator.com/item?id=47760529

Nothing Ever Happens: Polymarket bot that always buys No on non-sports markets
https://github.com/sterlingcrispin/nothing-ever-happens
https://news.ycombinator.com/item?id=47753472

US appeals court declares 158-year-old home distilling ban unconstitutional
https://nypost.com/2026/04/11/us-news/us-appeals-court-declares-158-year-old-home-distilling-ban-unconstitutional/
https://news.ycombinator.com/item?id=47751781

Make tmux pretty and usable (2024)
https://hamvocke.com/blog/a-guide-to-customizing-your-tmux-conf/
https://news.ycombinator.com/item?id=47752819

A new spam policy for “back button hijacking”
https://developers.google.com/search/blog/2026/04/back-button-hijacking
https://news.ycombinator.com/item?id=47760764

Android now stops you sharing your location in photos
https://shkspr.mobi/blog/2026/04/android-now-stops-you-sharing-your-location-in-photos/
https://news.ycombinator.com/item?id=47750669

Building a CLI for all of Cloudflare
https://blog.cloudflare.com/cf-cli-local-explorer/
https://news.ycombinator.com/item?id=47753689

Lean proved this program correct; then I found a bug
https://kirancodes.me/posts/log-who-watches-the-watchers.html
https://news.ycombinator.com/item?id=47759709