Syntax - Tasty Web Development Treats

1004: TanHacked

📅 May 13, 2026 ⏱️ 23m

Scott and Wes break down the “Mini Shai-Hulud” supply chain attack that compromised TanStack and other popular npm packages through a clever GitHub Actions cache poisoning exploit; a self-propagating worm that stole credentials and persisted through Claude Code hooks and VS Code tasks. They also cov