React

Supply Chain Alert: 84 TanStack NPM Packages Subverted in Massive GitHub Actions Exploit socket

socket

Supply Chain Alert: 84 TanStack NPM Packages Subverted in Massive GitHub Actions Exploit

Do Son May 12, 2026

The TanStack suite, a cornerstone of modern web development boasting over 50 million monthly downloads, has fallen...

Warning: Malicious npm Packages Targeting React, Vue, Vite with Destructive Payloads npm security

npm security

Warning: Malicious npm Packages Targeting React, Vue, Vite with Destructive Payloads

Do Son May 29, 2025

Researchers at Socket have uncovered over 60 malicious packages in the npm registry that covertly harvest data...