HIGHVulnerability
Verified
Global
CISA KEV: TanStack TanStack — TanStack Unspecified Vulnerability
·Source: CISA KEV
Updated:
Executive Summary
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.
Analysis
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity. Added to CISA Known Exploited Vulnerabilities catalog on 2026-05-27. Remediation due: 2026-06-10.