157: Shai-Hulud Is Back From the Dead
Next.js is back after a quiet stretch with 16.3, promising "instant" navigations, leaner dev servers, better agent tooling, and faster builds. The TanStack crew keeps shipping too — TanStack Table hit v9.0 and TanStack AI is closing in on v1.0 with tool calling, reasoning, code sandboxes, and memory. Then there's the bad news: a new Shai-Hulud variant compromised a major maintainer and infected a pile of key-value storage and caching packages with over a billion combined monthly downloads. Timestamps 0:00 - Intro 1:10 - Next.js 16.3 9:22 - TanStack AI and TanStack Table 9.0 15:55 - Another npm supply chain attack 27:07 - An update on the Deno v. Oracle lawsuit 31:44 - Anthropic announced Claude broke containment too 37:41 - Google Earth has to roll back an AI feature 39:34 - An interesting Sam Altman tweet 46:27 - What's making us happy News Paige: Another day another npm supply chain attack Jack: TanStack AI and TanStack Table 9.0 TJ: Next.js 16.3 Lightning News Not to be outdone by OpenAI, Anthropic announced Claude broke containment too An update on the Deno v Oracle lawsuit Google Earth has to roll back an AI feature An interesting Sam Altman tweet What's Making Us Happy Paige: Ride or Die miniseries Jack: Shin Kamen Rider movie and Vibe Island TJ: OpenAI Shop and Perplexity Supply Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube. Front-end Fire website Blue Collar Coder on YouTube Blue Collar Coder on Discord Reach out via email Tweet at us on X @front_end_fire Follow us on Bluesky @front-end-fire.com Subscribe to our YouTube channel @Front-EndFirePodcast



