Post

Socket@socket.dev

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

socket.devTanstack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.