Supply Chain Incidents

MAL-2026-3498

Malicious code in @tanstack/vue-start (npm)

MAL-2026-3501

Malicious code in @tanstack/zod-adapter (npm)

MAL-2026-3475

Malicious code in @tanstack/router-devtools-core (npm)

MAL-2026-3473

Malicious code in @tanstack/router-core (npm)

MAL-2026-3472

Malicious code in @tanstack/router-cli (npm)

MAL-2026-3468

Malicious code in @tanstack/react-start (npm)

MAL-2026-3471

Malicious code in @tanstack/react-start-server (npm)

MAL-2026-3470

Malicious code in @tanstack/react-start-rsc (npm)

MAL-2026-3469

Malicious code in @tanstack/react-start-client (npm)

MAL-2026-3465

Malicious code in @tanstack/react-router (npm)

MAL-2026-3467

Malicious code in @tanstack/react-router-ssr-query (npm)

MAL-2026-3466

Malicious code in @tanstack/react-router-devtools (npm)

MAL-2026-3464

Malicious code in @tanstack/nitro-v2-vite-plugin (npm)

MAL-2026-3463

Malicious code in @tanstack/history (npm)

MAL-2026-3462

Malicious code in @tanstack/eslint-plugin-start (npm)

MAL-2026-3461

Malicious code in @tanstack/eslint-plugin-router (npm)

MAL-2026-3460

Malicious code in @tanstack/arktype-adapter (npm)

MAL-2026-3432

Malicious code in @mistralai/mistralai (npm)

MAL-2026-3431

Malicious code in apkeep (PyPI)

MAL-2026-3430

Malicious code in cplace-bmw-emt-mvp (npm)

MAL-2026-3429

Malicious code in openai-spellchecker (PyPI)

MAL-2026-3508

Malicious code in crypto-javascri (npm)

MAL-2026-3506

Malicious code in @mimecast-ui/charts (npm)

MAL-2026-3507

Malicious code in @mimecast-ui/components (npm)