—npm
MAL-2026-3501· GHSA-xj4p-7xwr-q9jjMalicious code in @tanstack/zod-adapter (npm)
Modified: 5/12/2026
package
pkg:npm/%40tanstack/zod-adapter
Malicious code in @tanstack/zod-adapter (npm)
Modified: 5/12/2026
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Modified: 9/10/2026