package

npm/@tanstack/eslint-plugin-start

pkg:npm/%40tanstack/eslint-plugin-start

CRITICAL9.6npm

Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

Modified: 9/10/2026

—npm

Malicious code in @tanstack/eslint-plugin-start (npm)

Modified: 7/9/2026