TanStack

Headless, type-safe, powerful utilities for modern web apps.

Visit site

Open-source platform of type-safe, headless libraries and tooling for building modern web applications.

Recent stories

1 linked story

newsPRIMARY2026-05-11

TanStack reports npm supply-chain attack across 42 packages with credential-stealing payload

TanStack disclosed a supply-chain attack that pushed two malicious npm versions across 42 packages in a 10-minute window. The payload targeted cloud keys, GitHub tokens, npm credentials, and SSH material, so teams should audit installs and rotate secrets.