dang now tanstack is compromised (shai hulud)
socket.dev/blog/tanstac...
i think we’re going to HAVE to slop fork our dependency trees now to avoid these supply chain attacks. i don’t want to but how else can we do it? zero dependency life is looking pretty attractive right now
socket.dev
TanStack npm Packages Compromised in Ongoing Mini Shai-Hulud...
Socket detected 84 compromised TanStack npm package artifacts modified with suspected CI credential-stealing malware.
