Why does this keep happening?

Name: Why does this keep happening?
Uploaded: 2026-05-13T11:00:05.000Z
Channel: Syntax

Supply chain attack Npm security Github actions Shai Hulud worm Tanstack Cache poisoning Package manager security Cybersecurity Dev containers Pnpm Web security Development tools

Syntax May 13, 2026

AI summary

Scott and Wes analyze the Mini Shai-Hulud supply chain attack that compromised TanStack and other npm packages through GitHub Actions cache poisoning, creating a self-propagating worm that stole credentials via Claude Code hooks and VS Code tasks. The video covers attack mechanics and practical defenses including pnpm security defaults and dev containers. Ideal for JavaScript/TypeScript developers using npm and GitHub Actions.