{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"TypeScript.fm - The Friendly Show for TypeScript Developers","title":"Let the Spicy Takes Flow: Shai-Hulud Hits npm, Motion's TS Exodus | News | Ep 36","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/47197c83\"></iframe>","width":"100%","height":180,"duration":3100,"description":"News of the week of September 15, 2025: Shai-Hulud worm hits npm supply chain, WebAssembly 3 spec is ratified, and Elixir fans finally get their time in the spotlight. From the community: SquiggleConf was awesome, type branding and tuples, local-first app dev, and why @ts-ignore is almost always the worst option.\nChapters\nNews\nSocket.dev covers Shai-Hulud: Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm Packages \nPopular Tinycolor npm Package Compromised in Supply Chain Attack \nWhat the npm package attacks mean for us developers\nWasm 3.0 spec completed\nAnnouncing AshTypeScript, part of the Ash Framework (Phoenix/Elixir)\nts-to-zod now supports Zod 4.0\nTypebox 1.0 release\nFrom the Community\nSquiggleConf Happened! Check out the streams (separate videos to come)Day 1: https://www.youtube.com/live/C_ePbVZqXrw?si=MpRiE8n4xLNpfbV0\nDay 2: https://www.youtube.com/live/vSXLDvvIpYE?si=cWKQTjZCx91HWJN9\nFederico (AzraelSec): Type Branding in Typescript \nRenato: TypeScript Tuple Length \nEvan Hahn: @ts-ignore is almost always the worst option\nRoadmap.sh: Everything You Need to Learn to be a TS Dev\nGitHub Actions can now run pure TS on Node 22/24 runners without a build step (h/t Brian Muenzenmeyer)\nMathew Brown: Using Node's Test Runner with Typescript & React \nLibrary Watch: Combinatorial CLI opt parsing\nLibrary Watch: Introducing: @traversable/valibot (h/t Andrew Jarret)\nTool watch: FullStacked, a local-first app development environment\nTool watch: Roguestrad, a Retro 3D Game engine forked from DOOM-3-BFG with TypeScript scripting support\n\nCool Stuff\nFunny Read: Is your son a computer hacker?\nCool Lib: dom-to-image-more – render DOM elements as images\nCool Tool:  Pages CMS - Hassle-free CMS for static sites powered by Git \n\nSponsored by Excalibur.js\nExcalibur.js is the friendly TypeScript game engine for making 2D web games. Use your TypeScript or JavaScript skills to make games! Excalibur comes out-of-the-box with everything you need to make web games, like...","thumbnail_url":"https://img.transistorcdn.com/LUVFPtghCfQs9Z5cmq099b61B1Uvk41woCYRjlvHUak/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS9jY2Ew/ZThkMTZkZGNiN2E2/Mzc1MmI5NWI0ZjU0/YjA3MS5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}