Shai-Hulud compromises the @tanstack ecosystem: 80+ packages compromised | Blog | Endor Labs

Attackers planted credential-stealing malware in @tanstack package versions as part of the fifth Shai-Hulud wave in eight months.