npm scope
@tanstack
LPM Firewall blocks 42 packages in the @tanstack npm scope.
Jun 30, 2026
@tanstack/arktype-adapter@1.166.15
MalwareOSV/OpenSSF confirms @tanstack/arktype-adapter@1.166.15 as malicious package MAL-2026-3460. Malicious code in @tanstack/arktype-adapter (npm)
Jun 30, 2026
@tanstack/eslint-plugin-router@1.161.9
MalwareOSV/OpenSSF confirms @tanstack/eslint-plugin-router@1.161.9 as malicious package MAL-2026-3461. Malicious code in @tanstack/eslint-plugin-router (npm)
Jun 30, 2026
@tanstack/eslint-plugin-start@0.0.7
MalwareOpenSSF Malicious Packages via OSV confirms @tanstack/eslint-plugin-start@0.0.7 as malicious (MAL-2026-3462): Malicious code in @tanstack/eslint-plugin-start (npm)
Jun 30, 2026
@tanstack/history@1.161.9
MalwareOSV/OpenSSF confirms @tanstack/history@1.161.9 as malicious package MAL-2026-3463. Malicious code in @tanstack/history (npm)