12 May 2026

Several npm packages for the TanStack web development tools were compromised in the Mini Shai-Hulud supply chain attack; Mistral packages were also affected (Socket)

Socket:
Several npm packages for the TanStack web development tools were compromised in the Mini Shai-Hulud supply chain attack; Mistral packages were also affected  —  - Immediate triage: Run shasum -a 256 on all router_init.js files in your dependency tree.

Posted from: this blog via Microsoft Power Automate.

Daily Deals