News for hackers. Stuff that matters.

A comment on Postmortem: TanStack npm supply-chain compromise. Parent comment

Re:Postmortem: TanStack npm supply-chain compromise by squidsoup on Monday May 11, 2026 @09:55PM (#48103271)
This was a GitHub Actions hack, nothing related to publishing on npm was compromised.
[ Parent | on HN ]
Re:Postmortem: TanStack npm supply-chain compromise by rdg1991 on Tuesday May 12, 2026 @11:48AM (#48110006)
No way to prevent this, says only CI platform (owned by the same company who owns the package manager) where this regularly happens.
[ Parent | on HN ]