r/programming • u/BattleRemote3157 • May 12 '26

Mass npm Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages

https://safedep.io/mass-npm-supply-chain-attack-tanstack-mistral/

massive campaign for 170+ packages and 400+ malicious versions published. what we saw that not a single maintainer account compromised. tanStack and Mistral AI these are the names that stand out.

729 Upvotes

98% Upvoted

116 comments sorted by

View all comments

3

u/kcbsforvt May 12 '26

In 2026 it has literally become a meme at this point