The home for great developer writing.

We surface the best developer writing from thousands of independent blogs, updated daily.

Hardening TanStack After the npm Compromise

· TanStack Blog · May 12, 2026, 4:51 p.m.

npm supply chain security tanstack Postmortem Analysis

Summary

This blog post outlines the changes and strategies implemented by TanStack following the npm supply-chain attack on May 11. It serves as a companion to their incident postmortem, detailing the organization's efforts to improve security and prevent similar vulnerabilities in the future.

Read full post on tanstack.com →

MORE POSTS LIKE THIS

Postmortem: TanStack npm supply-chain compromise

TanStack Blog · May 11, 2026

npm supply chain security

npm supply-chain attack hits 400+ packages and steals developer credentials

Developer Tech · Aug 6, 2026

Cybersecurity AI

What is npm doing to protect the JavaScript ecosystem – and is it enough?

Thestack · Jun 16, 2026

Open Source Cybersecurity

How to Fix the TanStack Supply Chain Attack

tumberger · May 12, 2026

supply chain security tanstack

npm’s Defaults Are Bad

Andrew Nesbitt · Mar 31, 2026

Javascript npm

security: Mitigating the Axios npm supply chain compromise

Sujith Quintelier · Apr 1, 2026

Axios npm

Discover more posts →

AUTHOR

Sponsored

Zulip

Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.

Become a sponsor →

BLOG POST FEATURED ON

Placeholder image

Add this plugin to your blog