Poison in the Cache: Dissecting the "Mini Shai-Hulud" Worm at TanStack

This episode details the "Mini Shai-Hulud" supply chain compromise that affected TanStack, explaining how a sophisticated social engineering campaign led to a worm-like spread across the npm ecosystem. Listeners will learn about the multi-stage attack, which began with phishing to steal credentials, followed by a stealthy reconnaissance phase, and culminating in the installation of persistent backdoors on developer machines for continuous remote control. It highlights the critical role of human vulnerability in sophisticated cyberattacks.