Tag

tanstack-npm-attack

Safeguard articles tagged "tanstack-npm-attack" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

Mini Shai-Hulud hits TanStack npm packages

TeamPCP's Mini Shai-Hulud worm hijacked 42 TanStack npm packages via stolen GitHub OIDC tokens, spreading to 169 packages with valid SLSA attestations.

Jul 4, 20267 min read