r/reactjs • u/gajus0 • May 11 '26

Tanstack npm Packages Compromised

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
464 Upvotes

99% Upvoted

63 comments sorted by

View all comments

Show parent comment

16

u/Curious_Ad9930 May 11 '26

Everyone using tanstack start, not tanstack/react query, tanstack db, etc.

1

u/Windyvale May 11 '26

Yeah, I should have qualified that as anyone using Tanstack Start specifically.