993: It’s Been A Hell Of Week

Scott and Wes break down a chaotic week in dev news — the Claude Code source leak, a nasty Axios npm supply chain hack, and Railway’s private cache exposure — plus how to keep these nightmare scenarios from hitting your own projects.

Show Notes

•
00:00 Welcome to Syntax!

•
00:55 Claude Code Leaked!

• Wes’ X Post (x.com/wesbos/status/2038958747200962952?s=20)

• Apple Source Code Video (youtube.com/watch?v=F1RVFlCWPL4&t=351s)

•
05:42 Burning through Claude Code token limits.

• Reddit Thread (old.reddit.com/r/ClaudeAI/comments/1s7mkn3/psa…)

•
08:57 Axios hacked!

• Step Security (stepsecurity.io/blog/axios-compromised-on-npm-…)

• pnpm Supply Chain Security (pnpm.io/supply-chain-security)

• pnpm minimumReleaseAge (pnpm.io/settings#minimumreleaseage)

•
16:13 Pretext blew up!

• Pretext.js Demos (pretextjs.dev/pretext-demo)

• Wes’ Demo (pretextjs.dev/pretext-demo/showcase-face-text)

•
27:24 Railway shared private cache.

• Railway Incident Report (blog.railway.com/p/incident-report-march-30-20…)

•
31:54 Sick Picks & Shameless Plugs.

Sick Picks

• Scott: Kindle Colorsoft Kids (amzn.to/4lYUEnc)

• Wes: UGREEN 200W 8-Port GaN USB C Charger Block (amzn.to/4dP3jGQ), Wyze Headphones (wyze.com/products/wyze-headphones)

Shameless Plugs

• Scott: Syntax on YouTube (youtube.com/@syntaxfm)

Hit us up on Socials!

Syntax: X (twitter.com/syntaxfm) Instagram (instagram.com/syntax_fm) Tiktok (tiktok.com/@syntaxfm) LinkedIn (linkedin.com/company/96077407/admin/feed/posts) Threads (threads.net/@syntax_fm)

Wes: X (twitter.com/wesbos) Instagram (instagram.com/wesbos) Tiktok (tiktok.com/@wesbos) LinkedIn (linkedin.com/in/wesbos) Threads (threads.net/@wesbos)

Scott: X (twitter.com/stolinski) Instagram (instagram.com/stolinski) Tiktok (tiktok.com/@stolinski) LinkedIn (linkedin.com/in/stolinski) Threads (threads.net/@stolinski)

Randy: X (twitter.com/randyrektor) Instagram (instagram.com/randyrektor) YouTube (youtube.com/@randyrektor) Threads (threads.net/@randyrektor)