---
title: "Malhar Morey (@malharmorey) | Hashnode"
description: "JavaScript internals, side projects, and the bugs in between. Read the latest articles by Malhar Morey on Hashnode."
url: "https://hashnode.com/@malharmorey"
---

@malharmorey

# Malhar Morey

@malharmorey · Pune, India · Joined July 2026

JavaScript internals, side projects, and the bugs in between.

### [AI Output Is Untrusted Input: How ext0 Lets an LLM Query Your Database](https://malharmorey.hashnode.dev/ai-output-is-untrusted-input?utm_source=hashnode&utm_medium=feed)

An LLM writing your database queries is easy; trusting it is hard. ext0 wraps every generated query in four safety gates; code holds the final veto.

8 min read · [malharmorey.hashnode.dev](https://malharmorey.hashnode.dev/ai-output-is-untrusted-input?utm_source=hashnode&utm_medium=feed)

[Jun 24](https://hashnode.com/posts/ai-output-is-untrusted-input/6a57cb51e2a0716523ccf37c)

### [PACKED to HOLEY: How JS Arrays Fall Down the Optimization Ladder](https://malharmorey.hashnode.dev/packed-to-holey-how-js-arrays-fall-down-the-optimization-ladder?utm_source=hashnode&utm_medium=feed)

V8 silently profiles every array you make. One float, one string, or one hole can downgrade it forever. Here is the ladder, measured.

8 min read · [malharmorey.hashnode.dev](https://malharmorey.hashnode.dev/packed-to-holey-how-js-arrays-fall-down-the-optimization-ladder?utm_source=hashnode&utm_medium=feed)

[Apr 2](https://hashnode.com/posts/packed-to-holey-how-js-arrays-fall-down-the-optimization-ladder/6a57b860fef462b97811386d)