Postmortem: TanStack NPM supply-chain compromise(tanstack.com)
1047 points by varunsharma07 | 435 comments
GitHub issue on TanStack Router reporting that several latest npm releases are potentially compromised, linking to a StepSecurity analysis of a self-spreading supply-chain attack.

