✨
AI Summary
- TanStack supply chain attack used GitHub Actions cache poisoning.
- Worm stole credentials via Claude Code hooks and VS Code tasks.
- Protect yourself with pnpm defaults, dev containers, and practical defenses.