On May 11, 2024, TanStack suffered a sophisticated supply-chain attack that compromised 42 npm packages and published 84 malicious versions within six minutes. The attackers exploited GitHub Actions c…
TanStack AI has achieved full compliance with the AG-UI open protocol for agent-to-frontend communication, enabling bidirectional interoperability between any AG-UI client and server. The update makes…
A developer has released an open-source supply-chain audit script, "Mini Shai-Hulud," designed to detect the TanStack Router and Mistral AI supply-chain attacks. The bash script checks for specific SH…
TanStack issued an all-clear on May 15, 2026, after a three-day security sweep following the compromise of 42 Router/Start packages on npm. The malicious code was injected through a poisoned CI cache,…
On May 11, 2026, a coordinated supply chain attack compromised over 170 npm packages and 2 PyPI packages, totaling 404 malicious versions, targeting major projects including the entire TanStack router…
On May 11, 2026, an attacker compromised the TanStack Router/Start repository and published 84 malicious npm package versions across 42 packages by exploiting a pull_request_target vulnerability, GitH…