Threat intelligence / Vulnerability
CVE-2026-45321
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.
Vulnerability
TypeVulnerability
External ID—
First seen2026-05-27
Last seen2026-05-27
Confidence
—
TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware under a trusted identity.
Labels
CISA KEV context
Vendor / productTanStack TanStack
Added2026-05-27
Due date2026-06-10
1 recorded
Relationships
1 external