are-you-get-tanstack-attack

TanStack Router CVE-Scanner Ein Sicherheits-Scanning-Tool zur Erkennung der TanStack Router CVE | TanStack Router GHSA in Ihren Projekten. Übersicht Dieses Tool durchsucht Ihre Codebasis nach Indikatoren der TanStack Router-Sicherheitslücke CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx, die bestimmte...

tanstack-compromise-checker

tanstack-compromise-checker ⚠️ Aviso: Esta ferramenta foi criada para o meu próprio caso de uso. Todos os indicadores são derivados das seguintes fontes de advisories: GHSA-g7cv-rxg3-hmpx Snyk: TanStack npm packages compromised StepSecurity: Mini Shai-Hulud deep dive Se novos IOCs, variantes de...

mini-shai-hulud-detector

Mini Shai-Hulud Detector Scanner de um comando para o ataque de supply chain do npm Mini Shai-Hulud CVE-2026-45321, CVSS 9.6. Critical: detect before rotating tokens O worm instala um daemon de persistência gh-token-monitor que executa rm -rf se detectar revogação de credenciais. Não rotacione se...

scan-shai-hulud

scan-shai-hulud Um scanner Bash rápido, sem dependências, para detectar se sua máquina é afetada pelo ataque à cadeia de suprimentos CVE-2026-45321 "Mini Shai-Hulud". Em 11 de maio de 2026, mais de 170 pacotes npm e 2 pacotes PyPI em TanStack, Mistral AI, UiPath, OpenSearch e Guardrails AI foram...

VulnCheck KEV: CVE-2026-45321

TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity...

Exploit for Embedded Malicious Code in Tanstack Tanstack\/Arktype-Adapter

Simulasi Supply Chain Attack — CVE-2026-45321 TanStack Ed...

CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/ packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself...