—npm
MAL-2026-3486· GHSA-2gqf-jmq8-m7qwMalicious code in @tanstack/solid-start-server (npm)
Modified: 5/12/2026
package
pkg:npm/%40tanstack/solid-start-server
Malicious code in @tanstack/solid-start-server (npm)
Modified: 5/12/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026