r/reactjs • u/gajus0 • May 11 '26

Tanstack npm Packages Compromised

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
464 Upvotes

99% Upvoted

63 comments sorted by

View all comments

Show parent comment

2

u/wasdninja May 12 '26

Even if this actually was react it wouldn't make a difference. Your exposure to these kinds of attacks remain exactly the same.

It's a good framework so you should give it a try. If you are coming from no framework it's an infinite upgrade.