—npm
MAL-2026-3461· GHSA-4q7x-8jvq-jpfvMalicious code in @tanstack/eslint-plugin-router (npm)
Modified: 5/13/2026
package
pkg:npm/%40tanstack/eslint-plugin-router
Malicious code in @tanstack/eslint-plugin-router (npm)
Modified: 5/13/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026