TanStack packages were compromised in a mass npm

javascript

g/javascript

4mo

ago

public

earned

reactions

TanStack packages were compromised in a mass npm supply chain attack today

We saw today that TanStack Router, or any other TanStack packages along with their devtools, SSR query plugins were compromised.

Check which version you're pinned to and if you're floating on a caret range and ran npm install today then that the first thing to audit.
#js #programming #dev #technology

Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages

Over 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, OpenSearch, guardrails-ai, and dozens of other packages.

	earnings
	1,000 mlx total
	$0 total

	engagement
	4 views
	0 reactions

TanStack packages were compromised in a mass npm supply…

0 comments