Critical 9.6Known exploited (CISA KEV)Published May 11, 2026

CVE-2026-45321Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

Updated under an hour ago (Oct 26, 2026, 11:50 PM ET)

Does this affect you?

It affects @tanstack arktype-adapter and 59 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since May 27, 2026; federal agencies had to remediate by Jun 10, 2026, and it is known to be used in ransomware. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for @tanstack arktype-adapter

Exploited in the last 30 days

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.

CVSS: 9.6 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-506
Known exploited: Added to CISA KEV May 27, 2026; federal remediation due Jun 10, 2026; known ransomware useApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
EPSS (exploitation in the next 30 days): 3.28% (percentile 88)
Assigned by: GitHub_M
NVD analysis: Analyzed
Record last updated: Aug 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

@tanstack arktype-adapter tanstack:arktype_adapter (from the name)	1.166.12; 1.166.15	CNA record
@tanstack eslint-plugin-router tanstack:eslint_plugin_router (from the name)	1.161.9; 1.161.12	CNA record
@tanstack eslint-plugin-start tanstack:eslint_plugin_start (from the name)	0.0.4; 0.0.7	CNA record
@tanstack history tanstack:history (from the name)	1.161.9; 1.161.12	CNA record
@tanstack nitro-v2-vite-plugin tanstack:nitro_v2_vite_plugin (from the name)	1.154.12; 1.154.15	CNA record
@tanstack react-router tanstack:react_router (from the name)	1.169.5; 1.169.8	CNA record
@tanstack react-router-devtools tanstack:react_router_devtools (from the name)	1.166.16; 1.166.19	CNA record
@tanstack react-router-ssr-query tanstack:react_router_ssr_query (from the name)	1.166.15; 1.166.18	CNA record
@tanstack react-start tanstack:react_start (from the name)	1.167.68; 1.167.71	CNA record
@tanstack react-start-client tanstack:react_start_client (from the name)	1.166.51; 1.166.54	CNA record
1–10 of 60

References

References

https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx	x-refsource-confirm, mitigation, vendor-advisory
https://github.com/TanStack/router/issues/7383	x-refsource-misc, issue-tracking
https://tanstack.com/blog/npm-supply-chain-compromise-postmortem	x-refsource-misc, exploit, vendor-advisory
https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem	x-refsource-misc, exploit, third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45321	us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.