Re:Postmortem: TanStack npm supply-chain compromise
by WatchDog on Monday May 11, 2026 @10:52PM
(#48103649)
There a million ways that malware can persist without root.
[ Parent
| on HN ]
Re:Postmortem: TanStack npm supply-chain compromise
by btown on Tuesday May 12, 2026 @12:50PM
(#48110849)
And I'm increasingly concerned that one could vibe-code a massive payload that does all of these at once - including subtle things like trying to get itself installed into personal projects and forks, so it can persist across a system wipe. We're only seeing the beginning of these attacks.