ОБ ЭТОМ ЭПИЗОДЕ
Scott and Wes break down the “Mini Shai-Hulud” supply chain attack that compromised TanStack and other popular npm packages through a clever GitHub Actions cache poisoning exploit; a self-propagating worm that stole credentials and persisted through Claude Code hooks and VS Code tasks. They also cover how developers can protect themselves using pnpm’s security defaults, dev containers, and other practical defenses.
Show Notes- 00:00">00:00 Welcome to Syntax!
- 00:25">00:25 Understanding the Shai-Hulud Worm
- 02:47">02:47 Mechanics of the Attack: GitHub Actions and Cache
- 05:44">05:44 Brought to you by Sentry.io
- 06:09">06:09 Propagation and Impact of the Worm
- 09:30">09:30 Preventative Measures for Developers
- 12:33">12:33 The Role of Package Managers in Security
- 18:39">18:39 Using Dev Containers
- 20:57">20:57 Conclusion and Final Thoughts
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
английский
США
РАСШИФРОВКА 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
ПОИСК ПРОШЛЫХ ЭПИЗОДОВ
Искать прошлые эпизоды Syntax - Tasty Web Development Treats.
ДРУГИЕ ЭПИЗОДЫ В ЭТОМ ПОДКАсте
Scott and Wes ditch Electron and Tauri for GPUI, the GPU accelerated Rust UI framework from the Zed team. They get into its React-like API, styling that feels a lot like Tailwind, GPUI Kit components, the community fork drama, and the tiny desktop apps Scott has built with it.
Show Notes
00:00 …
Is Jev actually a leap forward for classification or just hype and fake demos? We dig in, plus Claude Code’s new AGENTS.md support, TinyCast (the free, open-source Raycast alternative), an iPhone Fold simulator in Xcode, and a stack of dev tools you’ll want to try
Show Notes
00:00 Welcome to …
Scott and Wes dig into a listener mailbag full of AI questions: how to bill freelance work when the tools make you faster, whether coding still matters in interviews, and if the AI bubble is about to pop. Plus sandboxing your agents, managing block-based CMS chaos, and what it takes to leave a stab…
Scott and Wes talk about how non-developers are actually using AI today. They also cover the stuff they don’t think holds up, like AI-staged listings and automated marketing.
Show Notes
00:00 Intro
00:38 Welcome to Syntax!
Wes’ post about using AI
01:50 Finding Parts With AI: Van Buckles…
Scott, Wes, and CJ break down developing for the iPhone Duo with the Device Posture and Viewport Segments APIs, plus the React 19.3 release and Pi’s new Radius platform. Also on deck: Tailwind joining Shopify, Shopify going back to native, Homebrew 7, Aeropeek, and Meta’s Muse Agent.
Show Notes
…
Отказ от ответственности: Подкаст и иллюстрации, встроенные в эту страницу, взяты из Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers, который является собственностью его владельца и не связан или не одобрен Listen Notes, Inc.
ИЗМЕНИТЬ
Спасибо, что помогаете поддерживать базу подкастов актуальной.
