Front-End Fire

There are finally some real-world consequences for the Shai-Hulud npm attacks: Australian Federal Police and the FBI arrested two men behind TeamPCP, a group that's been running supply chain attacks using npm since last year. Meanwhile, the open source acquihire train rolls on as Shopify buys Tailwind CSS. In Lightning News the WordPress/WP Engine saga returns as Matt Mullenweg is ousted as Automattic CEO, an Anthropic researcher quits with a warning that AI could kill us all inside a decade, and OpenAI claims it cracked a millennium math problem with 10,000 agents and 88 hours of compute.
Timestamps
0:00 - Intro
1:08 - Shopify buys Tailwind
7:24 - Two men arrested for Shai-Hulud hacks
15:35 - Automattic CEO Matt Mullenweg placed on leave of absence
23:37 - AI researchers think AI will kill us all
32:04 - OpenAI cracks a math millennium problem
39:44 - What's making us happy
News
Paige: Shopify buys Tailwind
TJ: Two men arrested for the TeamPCP Shai-Hulud supply chain attacks on npm
Lightning News
Automattic CEO Matt Mullenweg placed on leave of absence
AI researchers think AI will kill us all
OpenAI cracks math millennium problem
What's Making Us Happy
Paige: Reacher TV series
TJ: Wake Up Dead Man movie
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Front-End Fire website
Blue Collar Coder on YouTube
Blue Collar Coder on Discord
Reach out via email
Tweet at us on X @front_end_fire
Follow us on Bluesky @front-end-fire.com
Subscribe to our YouTube channel @Front-EndFirePodcast

Both big AI labs shipped their best models yet this week: OpenAI's GPT-6 Astra finally takes computer use seriously, and Anthropic's Fable & Mythos 5.1 land with gains in coding, knowledge work, and long-running tasks. Jack also went down a rabbit hole on how LLM watermarking actually works. Plus a Roomba with two floor-cleaning brains, a website tallying up AI agent felonies, and OpenAI cutting Cursor off from its models.
Timestamps
0:00 - Intro
1:16 - GPT-6 Astra
11:58 - How LLM watermarking works
29:47 - Fable & Mythos 5.1
41:48 - Felony Bench
43:21 - iRobot unveils the Roomba Duo
45:51 - OpenAI blocks Cursor
48:27 - What's making us happy
News
Paige: Anthropic debuts Fable & Mythos 5.1
Jack: How LLM watermarking works
TJ: GPT-6 Astra
Lightning News
OpenAI blocks Cursor after its acquisition by SpaceX
iRobot unveils the Roomba Duo
Felony Bench
What's Making Us Happy
Paige: Silo TV series, season 3
Jack: Kenwood CarPlay Unit
TJ: Pablo Torre Finds Out
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. You can join us in our Discord channel, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Front-end Fire website
Blue Collar Coder on YouTube
Blue Collar Coder on Discord
Reach out via email
Tweet at us on X @front_end_fire
Follow us on Bluesky @front-end-fire.com
Subscribe to our YouTube channel @Front-EndFirePodcast

This week we're asking the uncomfortable question: is AI coding making us worse developers, or just changing which skills matter? We dig into OpenAI's new WebMCP Challenge and what it means for the agentic web, plus Bun's massive 1.4 release packed with performance wins and new features. Then we wrap up with TanStack AI hitting release candidate and the internet's new favorite gimmick, Hugging Face's rollerblading Microduck.
Timestamps
0:00 - Intro
1:03 - Will AI coding prevent expertise?
21:40 - WebMCP challenge
29:49 - Bun 1.4 release
42:17 - TanStack AI RC
43:14 - Microduck
47:21 - What's making us happy
News
Paige: AI Coding will Prevent Expertise
Jack: WebMCP challenge
TJ: Bun 1.4
Lightning News
Microduck
TanStack AI enters RC
What's Making Us Happy
Paige: The Paradise Problem book
Jack: Altoids guitar pick insert website
TJ: Still Counting Podcast
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Front-End Fire website
Blue Collar Coder on YouTube
Blue Collar Coder on Discord
Reach out via email
Tweet at us on X @front_end_fire
Follow us on Bluesky @front-end-fire.com
Subscribe to our YouTube channel @Front-EndFirePodcast

This week we dig into Cloudflare's new agent-only browser, Kitesurf, built for speed over polish. Cursor made waves by ditching Solid.js for React, and Jack brings back a field report from RenderATL on the state of dev conferences in 2026. Plus, in Lightning News: pnpm's Rust rewrite, Microsoft trimming its AI feature list, Claude tackling the Riemann hypothesis with 60 subagents, and a Claude agent that accidentally hacked into a gym's registration system.
Timestamps
0:00 - Intro
1:00 - Cloudflare introduces Kitesurf: an agent-first browser
8:08 - Cursor moves from Solid to React
17:08 - Render ATL recap
30:44 - pnpm 12
32:39 - Microsoft kills off unsuccessful AI features
36:24 - Claude, the Riemann hypothesis, and Jared Sumner?
42:37 - A Claude agent hacked into a gym
48:40 - What's making us happy
News
Paige: Cloudflare introduces Kitesurf: an agent-first browser
Jack: Render ATL recap
TJ: Cursor moves from Solid to React
Lightning News
Pnpm 12 is Rust
Microsoft kills off unsuccessful AI features
The weird Mico video
Claude, the Riemann hypothesis, and Jared Sumner?
A Claude agent hacked into a gym
What's Making Us Happy
Paige: ChatGPT Desktop App
Jack: How dark is your movie & TV app
TJ: The coolest scroll animation I've ever seen
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Front-End Fire website
Blue Collar Coder on YouTube
Blue Collar Coder on Discord
Reach out via email
Tweet at us on X @front_end_fire
Follow us on Bluesky @front-end-fire.com
Subscribe to our YouTube channel @Front-EndFirePodcast

Next.js is back after a quiet stretch with 16.3, promising "instant" navigations, leaner dev servers, better agent tooling, and faster builds. The TanStack crew keeps shipping too — TanStack Table hit v9.0 and TanStack AI is closing in on v1.0 with tool calling, reasoning, code sandboxes, and memory. Then there's the bad news: a new Shai-Hulud variant compromised a major maintainer and infected a pile of key-value storage and caching packages with over a billion combined monthly downloads.
Timestamps
0:00 - Intro
1:10 - Next.js 16.3
9:22 - TanStack AI and TanStack Table 9.0
15:55 - Another npm supply chain attack
27:07 - An update on the Deno v. Oracle lawsuit
31:44 - Anthropic announced Claude broke containment too
37:41 - Google Earth has to roll back an AI feature
39:34 - An interesting Sam Altman tweet
46:27 - What's making us happy
News
Paige: Another day another npm supply chain attack
Jack: TanStack AI and TanStack Table 9.0
TJ: Next.js 16.3
Lightning News
Not to be outdone by OpenAI, Anthropic announced Claude broke containment too
An update on the Deno v Oracle lawsuit
Google Earth has to roll back an AI feature
An interesting Sam Altman tweet
What's Making Us Happy
Paige: Ride or Die miniseries
Jack: Shin Kamen Rider movie and Vibe Island
TJ: OpenAI Shop and Perplexity Supply
Thanks as always to our sponsor, the Blue Collar Coder channel on YouTube. Join us in our Discord, explore our website and reach us via email, or talk to us on X, Bluesky, or YouTube.
Front-end Fire website
Blue Collar Coder on YouTube
Blue Collar Coder on Discord
Reach out via email
Tweet at us on X @front_end_fire
Follow us on Bluesky @front-end-fire.com
Subscribe to our YouTube channel @Front-EndFirePodcast