The TanStack family of JavaScript libraries.
1 post
On May 11, 2026, attackers published 84 malicious versions across 42 @tanstack/* npm packages. Here is how to detect compromise and recover safely.
