‼️🚨 UPDATE: The TanStack npm attack is now a full campaign.
'Mini' Shai-Hulud has hit:
- OpenSearch
- Mistral AI
- Guardrails AI
-UiPath
- Squawk packages across npm and PyPI
The malware specifically targets AI developer tooling. It hooks into Claude Code (.claude/settings.json) and VS Code (.vscode/tasks.json) to re-execute on every tool event, long after the infected package is gone. npm uninstall does not fix this.
@JonathanShedler Absolutely. And the mechanism behind this lies in the blind application of statistical methods that produce the “evidence” without considering the assumptions that those methods are based on. We need the tools and framework of complexity sciences in psych research.
@ASanchez_Psi@JonathanShedler I agree that it’s reductionist, that’s why I find the dynamic view appealing. I just think that the tone of ”psychodynamic twitter” on CBT and re: approaches is far from neutral ”pointing out”. There’s a sense of victimhood, bitterness AND a whole lot of one-upmanship. 🤷♂️
@PoetryofAfter Forgot to mention that this framework reveals childhood links to current pathology quite naturally and even spontaneously during the sessions
@PoetryofAfter Are you familiar with Intensive Short-Term Psychodynamic Psychotherapy? I’ve found triangles of conflict & person quite useful clinically, and they’re based on psy.dyn. principles.
Prophesy: Leo Szilard—the physicist who first conceived of the nuclear chain reaction and who urged the US to undertake the Manhattan Project—explaining how science would stagnate, in 1948. https://t.co/0NCSFElvOg
@therapiworks Not directly, but this one from ISTDP framework has a nice overview of how anxiety discharges in the body as defence mechanisms, in response to getting closer to certain emotions. Jon also has Youtube videos on this.
https://t.co/6F3OMsTN1V