Tanstack Packages Compromised

Hinzugefügt: 2026-05-19

[00:00:00]Ten Stack NPM packages were compromised.

[00:00:02]On May 11th, attackers published malicious versions across multiple Ten Stack packages. And if your app installed one of those versions, the malware could run during package install and try to steal secrets from your machine. Ten Stack says the affected versions were deprecated, but you still need to check your log file. Look for the affected package versions, remove them, reinstall clean versions, and rotate any credentials exposed in that environment. Stay safe, dev warriors.