TanStack, a popular web UI framework has had its NPM packages compromised by another installment of Mini Shai-Hulud.
https://discourse.ifin.network/t/mini-shai-hulud-strikes-again-tanstack-npm-packages-compromised/428
#ThreatIntel #ThreatIntelligence #IFIN
IFIN - The Independent Federated Intelligence Network
npub1qm…nh363
2026-05-11 23:27:32 UTC
Author Public Key
npub1qm4tytdmranfklywc562p7gprs702mzkc4usqv6t8ja3d340evpslnh363Seen on
wss://relay.momostr.pinkPublished at
2026-05-11 23:27:32 UTCEvent JSON
{
"id": "76a75ae6f8b286d9de9d265bc1a3a5ab665825ff0744d9e50a5be2731ac8a6da",
"pubkey": "06eab22dbb1f669b7c8ec534a0f9011c3cf56c56c57900334b3cbb16c6afcb03",
"created_at": 1778542052,
"kind": 1,
"tags": [
[
"t",
"threatintelligence"
],
[
"proxy",
"https://infosec.exchange/@ifin/116558531955700753",
"web"
],
[
"t",
"ifin"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://infosec.exchange/ap/users/115741367687413652/statuses/116558531955700753",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/115741367687413652/statuses/116558531955700753",
"pink.momostr"
],
[
"-"
]
],
"content": "TanStack, a popular web UI framework has had its NPM packages compromised by another installment of Mini Shai-Hulud.\n\nhttps://discourse.ifin.network/t/mini-shai-hulud-strikes-again-tanstack-npm-packages-compromised/428\n\n#ThreatIntel #ThreatIntelligence #IFIN",
"sig": "083e7423c0e6bdf2d6328663bf9ffb0ed94e35ad9dd4aee9183ed246e605116a313d9ab12296ccf93fb0a0a6adc30841fdbbf8416abb87fdcc61e9d67fa45dda"
}