News for hackers. Stuff that matters.

A comment on Postmortem: TanStack npm supply-chain compromise.

Re:Postmortem: TanStack npm supply-chain compromise by exaroth on Monday May 11, 2026 @09:13PM (#48102964)
Installing any npm packages seems more and more like walking through the minefield at this point.
[ Parent | on HN ]
Re:Postmortem: TanStack npm supply-chain compromise by DaSHacka on Tuesday May 12, 2026 @06:35AM (#48106353)
And the worst part is installing one pulls like 50 bazillion others because of how dysfunctional the ecosystem is
[ Parent | on HN ]