Tag: Postinstall Script

Fake TanStack npm Package Steals Developer Credentials via Postinstall Script

Security researchers uncovered a supply chain attack where a fake TanStack npm package used automated postinstall scripts to harvest environment…