—npm
MAL-2026-3464· GHSA-qj9f-x9rw-w5v3Malicious code in @tanstack/nitro-v2-vite-plugin (npm)
Modified: 5/12/2026
package
pkg:npm/%40tanstack/nitro-v2-vite-plugin
Malicious code in @tanstack/nitro-v2-vite-plugin (npm)
Modified: 5/12/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026