—npm
MAL-2026-3474· GHSA-fc8c-vpgv-4wqgMalicious code in @tanstack/router-devtools (npm)
Modified: 5/12/2026
package
pkg:npm/%40tanstack/router-devtools
Malicious code in @tanstack/router-devtools (npm)
Modified: 5/12/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026