aivibe_codingBACKGROUND
TanStack NPM Packages Compromised
BACKGROUND
1 SIGNALFIRST DETECTED 11 May 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
19 May
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of
REPORT · HOW · The Hacker NewsOPEN STORY
21 May
GitHub links repo breach to TanStack npm supply-chain attack
GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm
REPORT · WHO · BleepingComputerOPEN STORY
17 Jun
144 Mastra npm Packages Compromised via Hijacked Contributor Account
As many as 144 npm packages associated with the Mastra namespace ("@mastra/*"), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI)
REPORT · HOW · The Hacker NewsOPEN STORY
Sources
Hacker News Best (RSS)
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →