Next.js is back after a quiet stretch with 16.3, promising "instant" navigations, leaner dev servers, better agent tooling, and faster builds. The TanStack crew keeps shipping too — TanStack Table hit v9.0 and TanStack AI is closing in on v1.0 with tool calling, reasoning, code sandboxes, and memory. Then there's the bad news: a new Shai-Hulud variant compromised a major maintainer and infected a pile of key-value storage and caching packages with over a billion combined monthly downloads.

Timestamps

0:00 - Intro
1:10 - Next.js 16.3
9:22 - TanStack AI and TanStack Table 9.0
15:55 - Another npm supply chain attack
27:07 - An update on the Deno v. Oracle lawsuit
31:44 - Anthropic announced Claude broke containment too
37:41 - Google Earth has to roll back an AI feature
39:34 - An interesting Sam Altman tweet
46:27 - What's making us happy

News

Paige: Another day another npm supply chain attack
Jack: TanStack AI and TanStack Table 9.0
TJ: Next.js 16.3

Lightning News

What's Making Us Happy

Paige: Ride or Die miniseries
Jack: Shin Kamen Rider movie and Vibe Island
TJ: OpenAI Shop and Perplexity Supply

Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.

157: Shai-Hulud Is Back From the Dead

Front-End Fire

157: Shai-Hulud Is Back From the Dead