CRITICAL9.6npm
GHSA-g7cv-rxg3-hmpx· CVE-2026-45321Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026
package
pkg:npm/%40tanstack/vue-router
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026
Malicious code in @tanstack/vue-router (npm)
Modified: 5/12/2026