Re:Postmortem: TanStack npm supply-chain compromise
by bpavuk on Monday May 11, 2026 @06:31PM
(#48101589)
if so, then this is actual terrorism of the software world!!
[ Parent
| on HN ]
Re:Postmortem: TanStack npm supply-chain compromise
by embedding-shape on Monday May 11, 2026 @06:43PM
(#48101707)
Only if the goal is to actually spread fear in a civilian population. It's not clear what the motivation is here besides "the worm spreads itself lol".
Re:Postmortem: TanStack npm supply-chain compromise
by bpavuk on Monday May 11, 2026 @06:45PM
(#48101730)
that dead man's switch surely smells like that tbh
Re:Postmortem: TanStack npm supply-chain compromise
by isityettime on Monday May 11, 2026 @07:20PM
(#48102072)
The dead man's switch reminds me of worms and viruses from my childhood, whose primary purpose was apparently just to wreak havoc rather than direct financial gain. It's a childish gimmick.
Re:Postmortem: TanStack npm supply-chain compromise
by resonious on Monday May 11, 2026 @07:37PM
(#48102242)
If an infected computer gets disabled after deactivating one stolen credential, it might slow down the victim from deactivating their other stolen credentials.
Re:Postmortem: TanStack npm supply-chain compromise
by isityettime on Monday May 11, 2026 @07:59PM
(#48102393)
Ugh. True.