Skip to content
OpenAdvisories

Product · TanStack

solid-start-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Critical 9.6
    CVE-2026-45321 Exploited · Ransomware

    Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

    On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/r…

    TanStack solid-start vue-start react-start npm
    KEV May 27, 2026