ÜBER DIESE EPISODE
Scott and Wes break down the “Mini Shai-Hulud” supply chain attack that compromised TanStack and other popular npm packages through a clever GitHub Actions cache poisoning exploit; a self-propagating worm that stole credentials and persisted through Claude Code hooks and VS Code tasks. They also cover how developers can protect themselves using pnpm’s security defaults, dev containers, and other practical defenses.
Show Notes- 00:00">00:00 Welcome to Syntax!
- 00:25">00:25 Understanding the Shai-Hulud Worm
- 02:47">02:47 Mechanics of the Attack: GitHub Actions and Cache
- 05:44">05:44 Brought to you by Sentry.io
- 06:09">06:09 Propagation and Impact of the Worm
- 09:30">09:30 Preventative Measures for Developers
- 12:33">12:33 The Role of Package Managers in Security
- 18:39">18:39 Using Dev Containers
- 20:57">20:57 Conclusion and Final Thoughts
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
Englisch
Vereinigte Staaten
TRANSKRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
VERGANGENE FOLGEN SUCHEN
Vorhandene Folgen von Syntax - Tasty Web Development Treats durchsuchen.
WEITERE EPISODEN IN DIESEM PODCAST
Scott and Wes ditch Electron and Tauri for GPUI, the GPU accelerated Rust UI framework from the Zed team. They get into its React-like API, styling that feels a lot like Tailwind, GPUI Kit components, the community fork drama, and the tiny desktop apps Scott has built with it.
Show Notes
00:00 …
Scott, Wes, and CJ break down developing for the iPhone Duo with the Device Posture and Viewport Segments APIs, plus the React 19.3 release and Pi’s new Radius platform. Also on deck: Tailwind joining Shopify, Shopify going back to native, Homebrew 7, Aeropeek, and Meta’s Muse Agent.
Show Notes
…
Scott and Wes dig into a listener mailbag full of AI questions: how to bill freelance work when the tools make you faster, whether coding still matters in interviews, and if the AI bubble is about to pop. Plus sandboxing your agents, managing block-based CMS chaos, and what it takes to leave a stab…
Is Jev actually a leap forward for classification or just hype and fake demos? We dig in, plus Claude Code’s new AGENTS.md support, TinyCast (the free, open-source Raycast alternative), an iPhone Fold simulator in Xcode, and a stack of dev tools you’ll want to try
Show Notes
00:00 Welcome to …
Scott and Wes talk about how non-developers are actually using AI today. They also cover the stuff they don’t think holds up, like AI-staged listings and automated marketing.
Show Notes
00:00 Intro
00:38 Welcome to Syntax!
Wes’ post about using AI
01:50 Finding Parts With AI: Van Buckles…
Rechtliche Hinweise: Der auf dieser Seite eingebettete Podcast und das Bildmaterial stammen von Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers, das Eigentum seines Eigentümers ist und nicht mit Listen Notes, Inc. verbunden ist oder von diesen unterstützt wird.
BEARBEITEN
Vielen Dank, dass Sie uns helfen, die Podcast-Datenbank auf dem neuesten Stand zu halten.
