Michael Warren on Mythryl: “dang now tanstack is compromised (shai hulud)…”

dang now tanstack is compromised (shai hulud) socket.dev/blog/tanstac... i think we’re going to HAVE to slop fork our dependency trees now to avoid these supply chain attacks. i don’t want to but how else can we do it? zero dependency life is looking pretty attractive right now

socket.devTanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.

11/5/26, 11:17 pm1 repost2 likes

Post