Post

We at TanStack just had a major attack against our Router packages. We have a postmortem out now explaining what happened and how we mitigated the response: tanstack.com/blog/npm-sup... No other TanStack packages outside of the Router monorepo were impacted

I'd be happy to help roll out `@lavamoat/allow-scripts` and some good defaults from lavamoat.github.io/guides/harde... to tanstack/start. It's make repositories using it immune to the entire class of attacks like the one used in malware that hit you.

We'd be super down, thank you. Let me know how I can help facilitate

I'm leaving for JSHeroes tomorrow, but maybe that's an opportunity to kickstart it in-person. I know @tkdodo.eu is gonna be there. Maybe someone else too? Regardless, I need someone who'd like to work with me and has enough expertise in how the project is set up to be able to push back /