TanStack npm compromise: 42 packages published with valid SLSA provenance via OIDC token theft from runner memory

Закрепи.sender (@heartysender), Jun 24, 2026, 17:21 UTC

TanStack npm compromise: 42 packages published with valid SLSA provenance via OIDC token theft from runner memory https://ift.tt/fTDCP4o Submitted June 24, 2026 at 09:37PM by GapLimp8396 via reddit https://ift.tt/KTOVGxn

The excerpt is quoted from a public Telegram channel, which owns its text.

Read the original post on Telegram

More posts from Закрепи.sender · All channels

FixLane Live vulnerabilities with ready fix prompts