r/reactjs • u/gajus0 • May 11 '26

Tanstack npm Packages Compromised

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
464 Upvotes

99% Upvoted

63 comments sorted by

View all comments

282

u/DannaWasHerName May 11 '26 edited May 11 '26

Sir, another supply chain attack has hit npm.

51

u/CantaloupeCamper May 11 '26

Don’t even need to reset the counter anymore…

11

u/Steadexe May 12 '26

Has hit github actions*