Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages
On May 11, 2026, a coordinated supply chain attack compromised over 170 npm packages and 2 PyPI packages, totaling 404 malicious versions, targeting major projects including the entire TanStack router ecosystem, Mistral …