7 matches found
are-you-get-tanstack-attack
TanStack Router CVE Scanner Uno strumento di scansione della sicurezza per rilevare la CVE di TanStack Router | GHSA di TanStack Router nei tuoi progetti. Panoramica Questo strumento analizza il tuo codebase alla ricerca di indicatori della vulnerabilità di TanStack Router CVE-2026-45321 /...
mini-shai-hulud-detector
Mini Shai-Hulud Detector Ein-Befehl-Scanner für die Mini Shai-Hulud npm-Supply-Chain-Attacke CVE-2026-45321, CVSS 9.6. Wichtig: Vor dem Rotieren der Tokens erkennen Der Wurm installiert einen Persistenz-Daemon gh-token-monitor, der rm -rf ausführt, wenn er eine Sperrung von Anmeldedaten erkennt...
tanstack-compromise-checker
tanstack-compromise-checker ⚠️ Disclaimer: Questo strumento è stato creato per il mio caso d'uso personale. Tutti gli indicatori derivano dalle seguenti fonti advisory: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive Se emergono nuovi IOC,...
scan-shai-hulud
scan-shai-hulud एक तेज़, शून्य-निर्भरता वाला Bash स्कैनर जो यह पता लगाता है कि आपकी मशीन CVE-2026-45321 "Mini Shai-Hulud" आपूर्ति श्रृंखला हमले से प्रभावित है या नहीं। 11 मई, 2026 को, TanStack, Mistral AI, UiPath, OpenSearch और Guardrails AI के 170 npm पैकेज और 2 PyPI पैकेज एक साथ जहर दिए गए।...
VulnCheck KEV: CVE-2026-45321
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...
Exploit for Embedded Malicious Code in Tanstack Tanstack\/Arktype-Adapter
Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Ed...
CVE-2026-45321
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...