TanStack Mini Shai-Hulud: 84 npm Versions, CVE-2026-45321
Source: Abhs.In
Published:
<p>Mini Shai-Hulud hit 42 TanStack npm packages with 84 malicious versions on May 11, 2026. CVE-2026-45321 CVSS 9.6; OpenAI reported signing-key exposure.</p> <p>Between 19:20 and 19:26 UTC on May 11, 2026 , attackers published 84 malicious versions across 42 @tanstack/* npm packages using TanStack'