Tag: tanstack

2 Attack Reports | 0 Vulnerabilities

Attack reports

Mini Shai-Hulud Hits TanStack npm Packages

The Mini Shai-Hulud campaign compromised 84 npm package artifacts in the TanStack namespace with credential-stealing malware targeting continuous integration systems. On May 11, 2026, attackers published 84 malicious versions across 42 TanStack packages by chaining the pull_request_target pattern, …
credential theft
npm
pypi
supply chain attack
github actions
mini shai-hulud
tanstack
2026-05-21
oidc token
Published: May 21, 2026
Downloadable IOCs: 0

Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files

An attacker registered the unscoped 'tanstack' name on npm and published four malicious versions (2.0.4-2.0.7) within 27 minutes on April 29, 2026. These packages contained postinstall hooks that automatically exfiltrated environment files containing sensitive credentials when developers ran npm in…
supply-chain
npm
2026-05-05
package-squatting
postinstall-hook
tanstack
webhook-exfiltration
Published: May 5, 2026
Downloadable IOCs: 5
Click here to see more Attack Reports