Postmortem: TanStack NPM supply-chain compromise(tanstack.com)
1047 points by varunsharma07 | 435 comments
GitHub issue on TanStack Router reporting that several latest npm releases are potentially compromised, linking to a StepSecurity analysis of a self-spreading supply-chain attack.





















































![Screenshot of youtube.com: Foucault's Order of Things Explained with Trading Cards [video]](https://hn.urlbox.com/shots/renders/2026/5/13/70ec89a7-31d3-4ac7-af94-f1599a787743.jpg)





