// tag
TanStack
Security incidents tagged TanStack. Newest first.
- incidents
- 2
- live
- 0
- patched
- 2
## 2 TanStack incidents in the last year
through Oct 22, 2026crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore
show 2 older incidents2 older incidents
May 2026 2
highTanStack TanStack: TanStack Unspecified Vulnerabilitypatched
› TanStack TanStack patched
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity. Added to CISA KEV on 2026-05-27.
open incident →CVE-2026-45321highOpenAI employee devices hit via TanStack Mini Shai-Hulud wavepatched
› TanStack-related npm packages / OpenAI employee endpoints patched
In May 2026 OpenAI confirmed two employee devices were breached as part of the broader TanStack Mini Shai-Hulud npm supply-chain campaign. OpenAI said customer data, production systems, IP and deployed software were not impacted.
