Post

Michael Warren@michaelwarren.dev

dang now tanstack is compromised (shai hulud) socket.dev/blog/tanstac... i think we’re going to HAVE to slop fork our dependency trees now to avoid these supply chain attacks. i don’t want to but how else can we do it? zero dependency life is looking pretty attractive right now

socket.devTanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.