Back to article
Socket

Tanstack NPM Packages Compromised in Ongoing Supply-Chain Attack (opens in new tab)

Covered by 9 sources See all sources covering this story including BleepingComputer, This Week In 4n6Discussed on Hacker News and r/reactjs

Covered in 9 articles

BleepingComputer·

OpenAI confirms security breach in TanStack supply chain attack

Feeds
This Week In 4n6·

Week 20

Feeds
theregister·

OpenAI caught in TanStack npm supply chain chaos after employee devices compromised

Discussed on Hacker News
Feeds
Comments on:·

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Feeds
Malware Analysis, News and Indicators·

BTS #74 - YellowKey, CVE Enrichment, Chipmaker Breach

Feeds
vulnu.com·

#168

Feeds
reactiflux.com·

TMiR 2026-05: Who even is on the Core team anymore, TanStack got pwn'd bad

Discussed on r/reactjs
Feeds
therecord.media·

OpenAI asks macOS users to update after TanStack npm supply chain attack

Feeds
snyk.io·

TanStack npm Packages Hit by Mini Shai-Hulud

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help