TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...
Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...