—npm
MAL-2026-3465· GHSA-5q7g-gw3w-r3rhMalicious code in @tanstack/react-router (npm)
Modified: 5/12/2026
package
pkg:npm/%40tanstack/react-router
Malicious code in @tanstack/react-router (npm)
Modified: 5/12/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026