Supply Chain Incidents

MAL-2026-3491

Malicious code in @tanstack/start-static-server-functions (npm)

MAL-2026-3492

Malicious code in @tanstack/start-storage-context (npm)

MAL-2026-3493

Malicious code in @tanstack/valibot-adapter (npm)

MAL-2026-3494

Malicious code in @tanstack/virtual-file-routes (npm)

MAL-2026-3496

Malicious code in @tanstack/vue-router-devtools (npm)

MAL-2026-3497

Malicious code in @tanstack/vue-router-ssr-query (npm)

MAL-2026-3477

Malicious code in @tanstack/router-plugin (npm)

MAL-2026-3495

Malicious code in @tanstack/vue-router (npm)

MAL-2026-3476

Malicious code in @tanstack/router-generator (npm)

MAL-2026-3500

Malicious code in @tanstack/vue-start-server (npm)

MAL-2026-3474

Malicious code in @tanstack/router-devtools (npm)

MAL-2026-3498

Malicious code in @tanstack/vue-start (npm)

MAL-2026-3501

Malicious code in @tanstack/zod-adapter (npm)

MAL-2026-3475

Malicious code in @tanstack/router-devtools-core (npm)

MAL-2026-3473

Malicious code in @tanstack/router-core (npm)

MAL-2026-3472

Malicious code in @tanstack/router-cli (npm)

MAL-2026-3468

Malicious code in @tanstack/react-start (npm)

MAL-2026-3471

Malicious code in @tanstack/react-start-server (npm)

MAL-2026-3470

Malicious code in @tanstack/react-start-rsc (npm)

MAL-2026-3469

Malicious code in @tanstack/react-start-client (npm)

MAL-2026-3465

Malicious code in @tanstack/react-router (npm)

MAL-2026-3467

Malicious code in @tanstack/react-router-ssr-query (npm)

MAL-2026-3466

Malicious code in @tanstack/react-router-devtools (npm)

MAL-2026-3464

Malicious code in @tanstack/nitro-v2-vite-plugin (npm)