Postmortem: TanStack npm supply-chain compromise | TanStack Blogby Tanner Linsley on May 11, 2026. Status (2026-05-15): All clear ✅ After a three-day full security sweep and hardening pass, we're issuing an official all-clear on TanStack repo and package security. Only the Router/Start repo was affected — 42 monorepo packages, 2 versions each. All were deprecated within the hour and removed by npm shortly after. All other TanStack repos and packages were unaff
TikTok, GitHub, Facebook Join Open-Source Bug Bounty
