TENTANG EPISODE INI
Scott and Wes break down the “Mini Shai-Hulud” supply chain attack that compromised TanStack and other popular npm packages through a clever GitHub Actions cache poisoning exploit; a self-propagating worm that stole credentials and persisted through Claude Code hooks and VS Code tasks. They also cover how developers can protect themselves using pnpm’s security defaults, dev containers, and other practical defenses.
Show Notes- 00:00">00:00 Welcome to Syntax!
- 00:25">00:25 Understanding the Shai-Hulud Worm
- 02:47">02:47 Mechanics of the Attack: GitHub Actions and Cache
- 05:44">05:44 Brought to you by Sentry.io
- 06:09">06:09 Propagation and Impact of the Worm
- 09:30">09:30 Preventative Measures for Developers
- 12:33">12:33 The Role of Package Managers in Security
- 18:39">18:39 Using Dev Containers
- 20:57">20:57 Conclusion and Final Thoughts
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
Inggris
Amerika Serikat
TRANSKRIP 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
CARI EPISODE TERDAHULU
Cari episode sebelumnya dari Syntax - Tasty Web Development Treats.
EPISODE LAIN DALAM PODCAST INI
Scott and Wes ditch Electron and Tauri for GPUI, the GPU accelerated Rust UI framework from the Zed team. They get into its React-like API, styling that feels a lot like Tailwind, GPUI Kit components, the community fork drama, and the tiny desktop apps Scott has built with it.
Show Notes
00:00 …
Is Jev actually a leap forward for classification or just hype and fake demos? We dig in, plus Claude Code’s new AGENTS.md support, TinyCast (the free, open-source Raycast alternative), an iPhone Fold simulator in Xcode, and a stack of dev tools you’ll want to try
Show Notes
00:00 Welcome to …
Scott, Wes, and CJ break down developing for the iPhone Duo with the Device Posture and Viewport Segments APIs, plus the React 19.3 release and Pi’s new Radius platform. Also on deck: Tailwind joining Shopify, Shopify going back to native, Homebrew 7, Aeropeek, and Meta’s Muse Agent.
Show Notes
…
Scott and Wes dig into a listener mailbag full of AI questions: how to bill freelance work when the tools make you faster, whether coding still matters in interviews, and if the AI bubble is about to pop. Plus sandboxing your agents, managing block-based CMS chaos, and what it takes to leave a stab…
Scott and Wes talk about how non-developers are actually using AI today. They also cover the stuff they don’t think holds up, like AI-staged listings and automated marketing.
Show Notes
00:00 Intro
00:38 Welcome to Syntax!
Wes’ post about using AI
01:50 Finding Parts With AI: Van Buckles…
Sanggahan: Podcast dan karya seni yang disematkan pada halaman ini berasal dari Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers, yang merupakan milik pemiliknya dan tidak berafiliasi atau didukung oleh Listen Notes, Inc.
Sunting
Terima kasih telah membantu agar basis data podcast tetap terbaru
