Post

We at TanStack just had a major attack against our Router packages. We have a postmortem out now explaining what happened and how we mitigated the response: tanstack.com/blog/npm-sup... No other TanStack packages outside of the Router monorepo were impacted

Short version of the story: somebody clicked on a link. Don't click on links.

That's an inaccurate assessment of what happened. None of our maintainers were compromised; nobody took direct action to incur this incident. Instead, a misconfiguration of our CI allowed this to happen fully autonomously.

Fair. I was more just using this as a humourous opportunity to remind everybody that we don't click on links, we don't think about clicking on links, and we certainly don't forward links to others for them to also click on.