InfoQ - NPM - News https://www.infoq.com InfoQ NPM News feed TanStack Details Sophisticated npm Supply Chain Attack That Compromised 42 Packages https://www.infoq.com/news/2026/05/tanstack-supply-chain-attack/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=NPM-news <img src="https://res.infoq.com/news/2026/05/tanstack-supply-chain-attack/en/headerimage/generatedHeaderImage-1778915238952.jpg"/><p>TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages and published 84 malicious package versions in just six minutes, exposing developers and CI/CD systems to credential theft and malware propagation.</p> <i>By Craig Risi</i> Application Security NPM Software Supply Chain DevOps news Tue, 19 May 2026 12:00:00 GMT https://www.infoq.com/news/2026/05/tanstack-supply-chain-attack/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=NPM-news Craig Risi 2026-05-19T12:00:00Z /news/2026/05/tanstack-supply-chain-attack/en