
        <p class="has-line-data">Scott and Wes break down a chaotic week in dev news — the Claude Code source leak, a nasty Axios npm supply chain hack, and Railway’s private cache exposure — plus how to keep these nightmare scenarios from hitting your own projects.</p>
<h3 class="code-line">
<a></a>Show Notes</h3>
<ul>
<li class="has-line-data">
<strong><a href="#t=00:00">00:00</a></strong> Welcome to Syntax!</li>
<li class="has-line-data">
<strong><a href="#t=00:55">00:55</a></strong> Claude Code Leaked!
<ul>
<li class="has-line-data"><a href="https://x.com/wesbos/status/2038958747200962952?s=20">Wes’ X Post</a></li>
<li class="has-line-data"><a href="https://www.youtube.com/watch?v=F1RVFlCWPL4&amp;t=351s">Apple Source Code Video</a></li>
</ul>
</li>
<li class="has-line-data">
<strong><a href="#t=05:42">05:42</a></strong> Burning through Claude Code token limits.
<ul>
<li class="has-line-data"><a href="https://old.reddit.com/r/ClaudeAI/comments/1s7mkn3/psa_claude_code_has_two_cache_bugs_that_can/">Reddit Thread</a></li>
</ul>
</li>
<li class="has-line-data">
<strong><a href="#t=08:57">08:57</a></strong> Axios hacked!
<ul>
<li class="has-line-data"><a href="https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan">Step Security</a></li>
<li class="has-line-data"><a href="https://pnpm.io/supply-chain-security">pnpm Supply Chain Security</a></li>
<li class="has-line-data"><a href="https://pnpm.io/settings#minimumreleaseage">pnpm minimumReleaseAge</a></li>
</ul>
</li>
<li class="has-line-data">
<strong><a href="#t=16:13">16:13</a></strong> Pretext blew up!
<ul>
<li class="has-line-data"><a href="https://pretextjs.dev/pretext-demo">Pretext.js Demos</a></li>
<li class="has-line-data"><a href="https://pretextjs.dev/pretext-demo/showcase-face-text">Wes’ Demo</a></li>
</ul>
</li>
<li class="has-line-data">
<strong><a href="#t=27:24">27:24</a></strong> Railway shared private cache.
<ul>
<li class="has-line-data"><a href="https://blog.railway.com/p/incident-report-march-30-2026-authenticated-user-data-cached">Railway Incident Report</a></li>
</ul>
</li>
<li class="has-line-data">
<strong><a href="#t=31:54">31:54</a></strong> Sick Picks &amp; Shameless Plugs.</li>
</ul>
<h3 class="code-line">
<a></a>Sick Picks</h3>
<ul>
<li class="has-line-data">Scott: <a href="https://amzn.to/4lYUEnc">Kindle Colorsoft Kids</a>
</li>
<li class="has-line-data">Wes: <a href="https://amzn.to/4dP3jGQ">UGREEN 200W 8-Port GaN USB C Charger Block</a>, <a href="https://www.wyze.com/products/wyze-headphones">Wyze Headphones</a>
</li>
</ul>
<h3 class="code-line">
<a></a>Shameless Plugs</h3>
<ul>
<li class="has-line-data">Scott: <a href="https://www.youtube.com/@syntaxfm">Syntax on YouTube</a>
</li>
</ul>
<h3 class="code-line">
<a></a>Hit us up on Socials!</h3>
<p class="has-line-data">Syntax: <a href="https://twitter.com/syntaxfm">X</a> <a href="https://www.instagram.com/syntax_fm/">Instagram</a> <a href="https://www.tiktok.com/@syntaxfm">Tiktok</a> <a href="https://www.linkedin.com/company/96077407/admin/feed/posts/">LinkedIn</a> <a href="https://www.threads.net/@syntax_fm">Threads</a></p>
<p class="has-line-data">Wes: <a href="https://twitter.com/wesbos">X</a> <a href="https://www.instagram.com/wesbos/">Instagram</a> <a href="https://www.tiktok.com/@wesbos">Tiktok</a> <a href="https://www.linkedin.com/in/wesbos/">LinkedIn</a> <a href="https://www.threads.net/@wesbos">Threads</a></p>
<p class="has-line-data">Scott: <a href="https://twitter.com/stolinski">X</a> <a href="https://www.instagram.com/stolinski/">Instagram</a> <a href="https://www.tiktok.com/@stolinski">Tiktok</a> <a href="https://www.linkedin.com/in/stolinski/">LinkedIn</a> <a href="https://www.threads.net/@stolinski">Threads</a></p>
<p class="has-line-data">Randy: <a href="https://twitter.com/randyrektor">X</a> <a href="https://www.instagram.com/randyrektor/">Instagram</a> <a href="https://www.youtube.com/@randyrektor">YouTube</a> <a href="https://www.threads.net/@randyrektor">Threads</a></p>
      

<description>Scott and Wes break down a chaotic week in dev news — the Claude Code source leak, a nasty Axios npm supply chain hack, and Railway’s private cache exposure — plus how to keep these nightmare scenarios from hitting your own projects.


Show Notes



00:00 Welcome to Syntax!


00:55 Claude Code Leaked!

Wes’ X Post

Apple Source Code Video





05:42 Burning through Claude Code token limits.

Reddit Thread





08:57 Axios hacked!

Step Security

pnpm Supply Chain Security

pnpm minimumReleaseAge





16:13 Pretext blew up!

Pretext.js Demos

Wes’ Demo





27:24 Railway shared private cache.

Railway Incident Report





31:54 Sick Picks &amp; Shameless Plugs.



Sick Picks


Scott: Kindle Colorsoft Kids


Wes: UGREEN 200W 8-Port GaN USB C Charger Block, Wyze Headphones




Shameless Plugs


Scott: Syntax on YouTube




Hit us up on Socials!

Syntax: X Instagram Tiktok LinkedIn Threads

Wes: X Instagram Tiktok LinkedIn Threads

Scott: X Instagram Tiktok LinkedIn Threads

Randy: X Instagram YouTube Threads</description>

Scott and Wes break down a chaotic week in dev news — the Claude Code source leak, a nasty Axios npm supply chain hack, and Railway’s private cache exposure — plus how to keep these nightmare scenarios from hitting your own projects.


Show Notes



00:00 Welcome to Syntax!


00:55 Claude Code Leaked!

Wes’ X Post

Apple Source Code Video





05:42 Burning through Claude Code token limits.

Reddit Thread





08:57 Axios hacked!

Step Security

pnpm Supply Chain Security

pnpm minimumReleaseAge





16:13 Pretext blew up!

Pretext.js Demos

Wes’ Demo





27:24 Railway shared private cache.

Railway Incident Report





31:54 Sick Picks & Shameless Plugs.



Sick Picks


Scott: Kindle Colorsoft Kids


Wes: UGREEN 200W 8-Port GaN USB C Charger Block, Wyze Headphones




Shameless Plugs


Scott: Syntax on YouTube




Hit us up on Socials!

Syntax: X Instagram Tiktok LinkedIn Threads

Wes: X Instagram Tiktok LinkedIn Threads

Scott: X Instagram Tiktok LinkedIn Threads

Randy: X Instagram YouTube Threads

Syntax - Tasty Web Development Treats

993: It’s Been A Hell Of Week

993: It’s Been A Hell Of Week

Description