Malicious TanStack Package Abuses Postinstall Script to Steal Developer Secrets
AI disclosure
Summary
A malicious npm package named “tanstack” has been discovered deploying a stealthy data exfiltration campaign, targeting developers through a deceptive nam...