Poison in the Cache: Dissecting the "Mini Shai-Hulud" Worm at TanStack
11:20
This episode details the "Mini Shai-Hulud" supply chain compromise that affected TanStack, explaining how a sophisticated social engineering campaign led to a worm-like spread across the npm ecosystem. Listeners will learn about the multi-stage attack, which began with phishing to steal credentials, followed by a stealthy reconnaissance phase, and culminating in the installation of persistent…