
Mass npm Supply Chain Attack Hits TanStack, Mistral AI, and 170+ Packages
SupplyChainCybersecurityMalwareOpenSource
A large-scale npm supply chain attack involved over 170 packages and more than 400 malicious versions being published. The attack did not compromise any maintainer accounts. Notable affected projects include TanStack and Mistral AI.