The home for great developer writing.

We surface the best developer writing from thousands of independent blogs, updated daily.

Postmortem: TanStack npm supply-chain compromise

· TanStack Blog · May 11, 2026, 11:49 p.m.

npm GitHub Actions supply chain security tanstack

Summary

This blog post provides a postmortem analysis of a security breach involving the TanStack npm packages, detailing the methods used by an attacker to compromise supply-chain integrity on npm and GitHub Actions, along with the consequences of this breach.

Read full post on tanstack.com →

MORE POSTS LIKE THIS

Hardening TanStack After the npm Compromise

TanStack Blog · May 12, 2026

npm supply chain security

The Next Dependency Problem Is Inside Your AI Agent

Amit Merchant · Nov 4, 2026

AI npm

npm Supply Chain Attack Mitigation: What Actually Works

Aleksei Aleinikov · Sep 9, 2026

npm-supply-chain-attack supply chain security

npm supply-chain attack hits 400+ packages and steals developer credentials