Hackers Compromise TanStack Query npm Package to Steal Developer Credentials
Sat Aug 29 2026
Development
Malware
Open Source
gbhackers.com
A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates type-safe TanStack Query hooks. Aikido Security said it identified 10 malicious versions published within 20 minutes. Because the package records more than 150,000 weekly downloads, the incident poses exposure risk to development teams. The breach exposes developer workstations and CI systems […]
The post Hackers Compromise TanStack Query npm Package to Steal Developer Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.