@electricfelix@ApoStructura PHEV is the worst outcome. The hybrid powertrains are more complex than either pure ICE or pure electric and are thus more costly to own. (though owning a BEV without home charging is a horrible experience)
‼️🚨 UPDATE: The TanStack npm attack is now a full campaign.
'Mini' Shai-Hulud has hit:
- OpenSearch
- Mistral AI
- Guardrails AI
-UiPath
- Squawk packages across npm and PyPI
The malware specifically targets AI developer tooling. It hooks into Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json) to re-execute on every tool event, long after the infected package is gone. npm uninstall does not fix this.
@poke_maam Ohhhh it wasn’t just a pervasive belief for me. Everything that I liked was wrong and caused me to get made fun of. It’s been quite the journey…