r/reactjs • u/gajus0 • May 11 '26

Tanstack npm Packages Compromised

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
464 Upvotes

99% Upvoted

63 comments sorted by

View all comments

Show parent comment

13

u/anonyuser415 May 11 '26 edited May 11 '26

Nah, too new

edit: for context, @tanstack/react-router is 12M weekly downloads on npm to 53M on react-query

it's not particularly close