Tag: router_init.js

1 Attack Reports | 0 Vulnerabilities

Attack reports

TanStack npm Packages Compromised in Ongoing Supply-Chain Attack

Socket detected 84 compromised TanStack npm package artifacts modified with credential-stealing malware targeting CI systems, including GitHub Actions. Affected packages like @tanstack/react-router have over 12 million weekly downloads. The malicious versions contain router_init.js, a heavily obfus…
credential stealer
supply-chain attack
github actions
ci/cd targeting
mini shai-hulud
npm compromise
2026-05-12
oidc token theft
router_init.js
router_runtime.js
session p2p network
tanstack_runner.js
Published: May 12, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports