cd/entity/Start· home› entities› Start
grep -l @start /news/*.json | wc -l → 1

@Start

mentions 1 type Organization feed RSS
12:00
2026-05-11
tanstack.com
ai-safety

Postmortem: TanStack npm supply-chain compromise

On May 11, 2026, an attacker compromised the TanStack Router/Start repository and published 84 malicious npm package versions across 42 packages by exploiting a pull_request_target vulnerability, GitH…

// co-occurs with top 7 entities
Tanner Linsley 1 TanStack 1 npm 1 GitHub Actions 1 Router 1 ashishkurmi 1 stepsecurity 1