Corbin Crutchley on Mythryl: “Just wanted to let people know that we just published our postmortem…”

⚠️ If you use any TanStack package in any of your projects and there's any chance any of them was updated today, stop what you're doing and read this. ... Actually there are 121 non-tanstack packages affected as well, so check the list anyway.

Socket@socket.dev

84 TanStack npm package artifacts were compromised in the ongoing Mini Shai-Hulud supply chain attack, adding suspected CI credential-stealing malware. Socket flagged every malicious version within six minutes of publication. Details: socket.dev/blog/tanstac...

socket.devTanstack npm Packages Compromised in Ongoing Mini Shai-Hulud...Socket detected 84 compromised TanStack npm packages modified with suspected CI credential-stealing malware.

Post