Lucene search
+L

CVE-2026-45321

🗓️ 12 May 2026 00:12:35Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 127 Views

Malware in TanStack packages exfiltrates cloud credentials, tokens, and keys via GitHub Actions OIDC.

Related
Detection
Affected
Refs
Social
NVD
Vulners
Node
Node
OR
tanstacktanstack/historyMatch1.161.9node.js
tanstacktanstack/historyMatch1.161.12node.js
Node
OR
Node
OR
tanstacktanstack/react-startMatch1.167.68node.js
tanstacktanstack/react-startMatch1.167.71node.js
Node
OR
tanstacktanstack/router-cliMatch1.166.46node.js
tanstacktanstack/router-cliMatch1.166.49node.js
Node
OR
tanstacktanstack/router-coreMatch1.169.5node.js
tanstacktanstack/router-coreMatch1.169.8node.js
Node
Node
Node
OR
tanstacktanstack/router-pluginMatch1.167.38node.js
tanstacktanstack/router-pluginMatch1.167.41node.js
Node
OR
tanstacktanstack/router-utilsMatch1.161.11node.js
tanstacktanstack/router-utilsMatch1.161.14node.js
Node
OR
Node
OR
tanstacktanstack/solid-startMatch1.167.65node.js
tanstacktanstack/solid-startMatch1.167.68node.js
Node
Node
Node
Node
Node
OR
tanstacktanstack/vue-routerMatch1.169.5node.js
tanstacktanstack/vue-routerMatch1.169.8node.js
Node
OR
tanstacktanstack/vue-startMatch1.167.61node.js
tanstacktanstack/vue-startMatch1.167.64node.js
Node
Node
Node
OR
tanstacktanstack/zod-adapterMatch1.166.12node.js
tanstacktanstack/zod-adapterMatch1.166.15node.js
Node
Node
OR
kilbottallyui/componentsMatch1.0.1node.js
kilbottallyui/componentsMatch1.0.2node.js
kilbottallyui/componentsMatch1.0.3node.js
kilbottallyui/coreMatch0.2.1node.js
kilbottallyui/coreMatch0.2.2node.js
kilbottallyui/coreMatch0.2.3node.js
kilbottallyui/databaseMatch1.0.1node.js
kilbottallyui/databaseMatch1.0.2node.js
kilbottallyui/databaseMatch1.0.3node.js
kilbottallyui/posMatch0.1.1node.js
kilbottallyui/posMatch0.1.2node.js
kilbottallyui/posMatch0.1.3node.js
kilbottallyui/themeMatch0.2.1node.js
kilbottallyui/themeMatch0.2.2node.js
kilbottallyui/themeMatch0.2.3node.js
Node
OR
neilcochrancross-stitchMatch1.1.3node.js
neilcochrancross-stitchMatch1.1.4node.js
neilcochrancross-stitchMatch1.1.6node.js
neilcochransquawk/airwaysMatch0.4.2node.js
neilcochransquawk/airwaysMatch0.4.3node.js
neilcochransquawk/airwaysMatch0.4.5node.js
neilcochransquawk/fixesMatch0.3.2node.js
neilcochransquawk/fixesMatch0.3.3node.js
neilcochransquawk/fixesMatch0.3.5node.js
neilcochransquawk/geoMatch0.4.4node.js
neilcochransquawk/geoMatch0.4.5node.js
neilcochransquawk/geoMatch0.4.7node.js
neilcochransquawk/mcpMatch0.9.1node.js
neilcochransquawk/mcpMatch0.9.2node.js
neilcochransquawk/mcpMatch0.9.4node.js
neilcochransquawk/navaidsMatch0.4.2node.js
neilcochransquawk/navaidsMatch0.4.3node.js
neilcochransquawk/navaidsMatch0.4.5node.js
neilcochransquawk/notamsMatch0.3.6node.js
neilcochransquawk/notamsMatch0.3.7node.js
neilcochransquawk/notamsMatch0.3.9node.js
neilcochransquawk/typesMatch0.8.1node.js
neilcochransquawk/typesMatch0.8.2node.js
neilcochransquawk/typesMatch0.8.4node.js
neilcochransquawk/unitsMatch0.4.3node.js
neilcochransquawk/unitsMatch0.4.4node.js
neilcochransquawk/unitsMatch0.4.6node.js
neilcochransquawk/weatherMatch0.5.6node.js
neilcochransquawk/weatherMatch0.5.7node.js
neilcochransquawk/weatherMatch0.5.9node.js
neilcochrants-dnaMatch3.0.1node.js
neilcochrants-dnaMatch3.0.2node.js
neilcochrants-dnaMatch3.0.4node.js
neilcochranwot-apiMatch0.8.1node.js
neilcochranwot-apiMatch0.8.2node.js
neilcochranwot-apiMatch0.8.4node.js
Node
OR
agentworkhqagentwork-cliMatch0.1.4node.js
agentworkhqagentwork-cliMatch0.1.5node.js
dirigibledirigible-ai/sdkMatch0.6.2node.js
dirigibledirigible-ai/sdkMatch0.6.3node.js
guardrailsaiguardrails_aiMatch0.10.1python
linuxfoundationopensearchMatch3.6.2node.js
mesamesadev/restMatch0.28.3node.js
mesamesadev/saguaroMatch0.4.22node.js
mesamesadev/sdkMatch0.28.3node.js
Node
OR
uipathuipath/admin-toolMatch0.1.1node.js
uipathuipath/agent-sdkMatch1.0.2node.js
uipathuipath/agent-toolMatch1.0.1node.js
uipathuipath/agent.sdkMatch0.0.18node.js
uipathuipath/ap-chatMatch1.5.7node.js
uipathuipath/apollo-coreMatch5.9.2node.js
uipathuipath/apollo-reactMatch4.24.5node.js
uipathuipath/apollo-windMatch2.16.2node.js
uipathuipath/authMatch1.0.1node.js
uipathuipath/case-toolMatch1.0.1node.js
uipathuipath/cliMatch1.0.1node.js
uipathuipath/commonMatch1.0.1node.js
uipathuipath/docsai-toolMatch1.0.1node.js
uipathuipath/filesystemMatch1.0.1node.js
uipathuipath/flow-toolMatch1.0.2node.js
uipathuipath/gov-toolMatch0.3.1node.js
uipathuipath/insights-sdkMatch1.0.1node.js
uipathuipath/llmgw-toolMatch1.0.1node.js
uipathuipath/maestro-sdkMatch1.0.1node.js
uipathuipath/maestro-toolMatch1.0.1node.js
uipathuipath/resources-toolMatch0.1.11node.js
uipathuipath/robotMatch1.3.4node.js
uipathuipath/rpa-toolMatch0.9.5node.js
uipathuipath/tasks-toolMatch1.0.1node.js
uipathuipath/telemetryMatch0.0.7node.js
uipathuipath/traces-toolMatch1.0.1node.js
uipathuipath/vssMatch0.1.6node.js
uipathuipath/widget.sdkMatch1.2.3node.js
[
  {
    "vendor": "@tanstack",
    "product": "arktype-adapter",
    "versions": [
      {
        "version": "1.166.12",
        "status": "affected"
      },
      {
        "version": "1.166.15",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "eslint-plugin-router",
    "versions": [
      {
        "version": "1.161.9",
        "status": "affected"
      },
      {
        "version": "1.161.12",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "eslint-plugin-start",
    "versions": [
      {
        "version": "0.0.4",
        "status": "affected"
      },
      {
        "version": "0.0.7",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "history",
    "versions": [
      {
        "version": "1.161.9",
        "status": "affected"
      },
      {
        "version": "1.161.12",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "nitro-v2-vite-plugin",
    "versions": [
      {
        "version": "1.154.12",
        "status": "affected"
      },
      {
        "version": "1.154.15",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-router",
    "versions": [
      {
        "version": "1.169.5",
        "status": "affected"
      },
      {
        "version": "1.169.8",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-router-devtools",
    "versions": [
      {
        "version": "1.166.16",
        "status": "affected"
      },
      {
        "version": "1.166.19",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-router-ssr-query",
    "versions": [
      {
        "version": "1.166.15",
        "status": "affected"
      },
      {
        "version": "1.166.18",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-start",
    "versions": [
      {
        "version": "1.167.68",
        "status": "affected"
      },
      {
        "version": "1.167.71",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-start-client",
    "versions": [
      {
        "version": "1.166.51",
        "status": "affected"
      },
      {
        "version": "1.166.54",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-start-rsc",
    "versions": [
      {
        "version": "0.0.47",
        "status": "affected"
      },
      {
        "version": "0.0.50",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "react-start-server",
    "versions": [
      {
        "version": "1.166.55",
        "status": "affected"
      },
      {
        "version": "1.166.58",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-cli",
    "versions": [
      {
        "version": "1.166.46",
        "status": "affected"
      },
      {
        "version": "1.166.49",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-core",
    "versions": [
      {
        "version": "1.169.5",
        "status": "affected"
      },
      {
        "version": "1.169.8",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-devtools",
    "versions": [
      {
        "version": "1.166.16",
        "status": "affected"
      },
      {
        "version": "1.166.19",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-devtools-core",
    "versions": [
      {
        "version": "1.167.6",
        "status": "affected"
      },
      {
        "version": "1.167.9",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-generator",
    "versions": [
      {
        "version": "1.166.45",
        "status": "affected"
      },
      {
        "version": "1.166.48",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-plugin",
    "versions": [
      {
        "version": "1.167.38",
        "status": "affected"
      },
      {
        "version": "1.167.41",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-ssr-query-core",
    "versions": [
      {
        "version": "1.168.3",
        "status": "affected"
      },
      {
        "version": "1.168.6",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "router-utils",
    "versions": [
      {
        "version": "1.161.11",
        "status": "affected"
      },
      {
        "version": "1.161.14",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "outer-vite-plugin",
    "versions": [
      {
        "version": "1.166.53",
        "status": "affected"
      },
      {
        "version": "1.166.56",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-router",
    "versions": [
      {
        "version": "1.169.5",
        "status": "affected"
      },
      {
        "version": "1.169.8",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-router-devtools",
    "versions": [
      {
        "version": "1.166.16",
        "status": "affected"
      },
      {
        "version": "1.166.19",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-router-ssr-query",
    "versions": [
      {
        "version": "1.166.15",
        "status": "affected"
      },
      {
        "version": "1.166.18",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-start",
    "versions": [
      {
        "version": "1.167.65",
        "status": "affected"
      },
      {
        "version": "1.167.68",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-start-client",
    "versions": [
      {
        "version": "1.166.50",
        "status": "affected"
      },
      {
        "version": "1.166.53",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "solid-start-server",
    "versions": [
      {
        "version": "1.166.54",
        "status": "affected"
      },
      {
        "version": "1.166.57",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-client-core",
    "versions": [
      {
        "version": "1.168.5",
        "status": "affected"
      },
      {
        "version": "1.168.8",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-fn-stubs",
    "versions": [
      {
        "version": "1.161.9",
        "status": "affected"
      },
      {
        "version": "1.161.12",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-plugin-core",
    "versions": [
      {
        "version": "1.169.23",
        "status": "affected"
      },
      {
        "version": "1.169.26",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-server-core",
    "versions": [
      {
        "version": "1.167.33",
        "status": "affected"
      },
      {
        "version": "1.167.36",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-static-server-functions",
    "versions": [
      {
        "version": "1.166.44",
        "status": "affected"
      },
      {
        "version": "1.166.47",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "start-storage-context",
    "versions": [
      {
        "version": "1.166.38",
        "status": "affected"
      },
      {
        "version": "1.166.41",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "valibot-adapter",
    "versions": [
      {
        "version": "1.166.12",
        "status": "affected"
      },
      {
        "version": "1.166.15",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "virtual-file-routes",
    "versions": [
      {
        "version": "1.161.10",
        "status": "affected"
      },
      {
        "version": "1.161.13",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-router",
    "versions": [
      {
        "version": "1.169.5",
        "status": "affected"
      },
      {
        "version": "1.169.8",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-router-devtools",
    "versions": [
      {
        "version": "1.166.16",
        "status": "affected"
      },
      {
        "version": "1.166.19",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-router-ssr-query",
    "versions": [
      {
        "version": "1.166.15",
        "status": "affected"
      },
      {
        "version": "1.166.18",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-start",
    "versions": [
      {
        "version": "1.167.61",
        "status": "affected"
      },
      {
        "version": "1.167.64",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-start-client",
    "versions": [
      {
        "version": "1.166.46",
        "status": "affected"
      },
      {
        "version": "1.166.49",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "vue-start-server",
    "versions": [
      {
        "version": "1.166.50",
        "status": "affected"
      },
      {
        "version": "1.166.53",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "@tanstack",
    "product": "zod-adapter",
    "versions": [
      {
        "version": "1.166.12",
        "status": "affected"
      },
      {
        "version": "1.166.15",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation