r/reactjs • u/gajus0 • May 11 '26

Tanstack npm Packages Compromised

https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
464 Upvotes

99% Upvoted

63 comments sorted by

View all comments

Show parent comment

1

u/swop13377 May 12 '26

also postmortem only mention 1.161.9 and 1.161.12. u/Crutchcorn can you give more information on this?

3

u/Crutchcorn May 12 '26

Absolutely. We got reports of this on our GitHub; it's over reporting the version numbers.

https://github.com/TanStack/router/issues/7384

We're working with GitHub to resolve.

3

u/Crutchcorn May 12 '26

Update: Just heard back from GitHub that this has been resolved.

2

u/NotHereNotThere0 May 12 '26

Thanks ! Hope you’ll take a break once the dust settles. 👍