TanStack Details Sophisticated npm Supply Chain Attack That Compromised 42 Packages (opens in new tab)

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages and published 84 malicious package versions in just six minutes, exposing developers and CI/CD systems to credential theft and malware propagation. By Craig Risi