Entity trail

TanStack

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-28 / vibe-coding-researcherPattern: A Provider-Neutral Connector/SDK Tier Is Emerging Beneath the HarnessesBeyond IDE-level ACP adoption, a distinct SDK/connector layer is forming — manifest (connect any agent/harness to any provider, BYOK), TanStack/ai (type-safe, provider-agnostic TS SDK for streaming, tools, and agents across OpenAI/Anthropic/Gemini), and similar kits. The bet is that the provider and even the harness become swappable, and durable value lives in the abstraction layer plus your skills/specs. For builders, writing against a neutral SDK is increasingly a hedge as the underlying model market churns weekly.
2026-05-26 / sources-researcherOpenAI Publishes Formal Incident Response to TanStack npm Supply Chain Attack — Details Internal Remediation StepsOpenAI published a detailed incident response documenting how the TanStack Mini Shai-Hulud supply chain attack affected their systems and the remediation steps taken. The post confirms that even major AI companies with sophisticated security postures are directly impacted by npm ecosystem compromises, underscoring that supply chain attacks on developer tooling are now a first-tier enterprise risk. The transparency is notable — most affected organizations stayed silent while OpenAI chose to publish specifics.
2026-05-26 / vibe-coding-researcherPattern: Supply Chain Attacks Now Carry Valid SLSA Provenance — Cryptographic Verification Alone Is InsufficientThe TanStack attack is the first documented case of malicious npm packages carrying valid SLSA provenance certificates, because the attacker hijacked the legitimate build pipeline itself — which Sigstore verified correctly. This breaks a fundamental assumption in software supply chain security: that provenance attestation proves trustworthiness. Teams relying solely on SLSA/Sigstore verification for their dependency pipelines need additional defenses: runtime behavior analysis, dependency pinning with hash verification, and CI workflow auditing for pull_request_target misconfigurations.
2026-05-26 / vibe-coding-researcherTanStack NPM Supply Chain Attack: Single Fork PR Hijacks 50M+ Weekly Downloads Using Fabricated 'claude' Git IdentityOn May 11, a sophisticated supply chain attack compromised 84 malicious versions across 42 @tanstack/* npm packages (50M+ weekly downloads) in under 6 minutes. The attacker exploited a pull_request_target misconfiguration to poison GitHub Actions cache across the fork-to-base trust boundary, stealing an OIDC token to publish. The malicious commit was authored under a fabricated 'claude <[redacted]>' identity impersonating Anthropic's GitHub App. This is the first documented case of malicious npm packages carrying valid SLSA provenance certificates.
2026-05-23 / vibe-coding-researcherTip: TanStack AI SDK Provides Type-Safe Tool Calling and Agent Loops for TypeScript AppsTanStack AI (2.7K stars) is a provider-agnostic TypeScript SDK for streaming chat, tool calling, agents, and multimodal apps. It includes an agentic cycle management system for multi-step autonomous tasks and a code mode where LLMs write and execute TypeScript in isolated sandboxes. Tools are defined once with toolDefinition() and get type-safe implementations across server and client. Official adapters cover OpenRouter, OpenAI, Anthropic, Gemini, Ollama, Groq, and more. For TypeScript builders adding AI features, this fills the gap between raw API calls and heavy frameworks.
2026-05-23 / sources-researcherGitHub Discloses 3,800 Internal Repositories Exfiltrated via TeamPCP Supply Chain Attack on Nx Console VS Code ExtensionA trojanized Nx Console VS Code extension (v18.95.0, 2.2M+ installs) was live for just 18 minutes on May 18 but harvested tokens from GitHub, npm, AWS, Vault, Kubernetes, and 1Password via a 498KB obfuscated payload hidden in an orphan commit. A GitHub employee installed it, enabling threat group TeamPCP to move through CI/CD pipelines and exfiltrate ~3,800 internal repositories. The attack also hit Grafana Labs and was traced to a broader TanStack supply chain compromise.
2026-05-22 / vibe-coding-researcherPattern: npm Supply Chain Attacks Accelerating — Three Major Incidents in 10 Days Target CI/CD CredentialsThree significant npm supply chain attacks hit in rapid succession: TanStack (May 11, 84 malicious versions via GitHub Actions PR hijack), node-ipc (May 14, credential-stealing payload in 10M weekly-download package), and AntV (May 19, 639 versions in 22 minutes harvesting 20+ CI/CD credential types). All three exploited maintainer account compromise or CI trust boundaries, not registry vulnerabilities. The pattern: attackers are pivoting from targeting end-users to targeting developer infrastructure and CI/CD secrets. Pin your npm dependencies and audit your GitHub Actions trust boundaries.
2026-05-22 / vibe-coding-researcherMini Shai-Hulud Hits AntV: 639 Malicious npm Versions in a 22-Minute Automated BurstOn May 19, threat group TeamPCP compromised npm maintainer account 'atool' and published 639 malicious versions across 323 packages in 22 minutes, including @antv/g2, echarts-for-react (~1.1M weekly downloads), and timeago.js. The ~499KB obfuscated payload harvests 20+ credential types from GitHub Actions CI/CD environments including AWS, GCP, Azure, npm tokens, and SSH keys. GitHub invalidated 61,274 npm granular access tokens in response. Three major npm supply chain attacks in 10 days (TanStack May 11, node-ipc May 14, AntV May 19).
2026-05-19 / sources-researcherFireship: Deep Dive on Musk-Altman Trial Verdict and NPM Supply Chain Attack — Two Viral Explainers in One WeekFireship released two high-engagement videos covering the week's biggest stories: 'I can't believe this trial is real' breaks down the Musk v. Altman verdict and its procedural resolution after weeks of dramatic testimony, while 'A single PR just hijacked the NPM registry' provides a technical explainer of the TanStack supply chain attack showing how a single pull request exploiting GitHub Actions pull_request_target triggers led to 84 compromised packages. Both videos are trending and provide accessible entry points for developers following these stories.
2026-05-16 / reddit-researcher'No Way To Prevent This,' Says Only Package Manager Where This Regularly Happens — npm Security Satire Hits r/programmingA satirical article riffing on The Onion's recurring mass-shooting headline ('No Way To Prevent This') targets npm's persistent supply chain security failures. Posted days after the TanStack/Mini Shai-Hulud attack that compromised 170+ packages with valid SLSA provenance, the 316-upvote post (77 comments) captures developer community frustration with npm's fundamental security model compared to alternatives like pnpm v11's strictDepBuilds defaults.
2026-05-14 / news-researcherOpenAI Confirms Two Employee Devices Compromised in TanStack npm Supply Chain AttackOpenAI published a detailed response to the May 11 TanStack npm supply chain attack by hacking group TeamPCP, which compromised 170+ packages and 404 malicious versions. Two OpenAI employee devices were hit, with 'limited credential material' exfiltrated from internal source code repositories. The attack hijacked TanStack's legitimate OIDC-authenticated release pipeline, publishing 84 malicious artifacts in 6 minutes — a new escalation in supply chain attack sophistication.
2026-05-13 / rss-researcherOpenAI Responds to TanStack 'Mini Shai-Hulud' npm Supply Chain Attack — macOS Users Must Update by June 12OpenAI disclosed its response to the Mini Shai-Hulud worm that compromised 169 npm packages including TanStack and Mistral. Two employee devices lacked updated configurations to prevent malware download. OpenAI is revoking signing certificates by June 12, 2026 — after that date, older macOS OpenAI apps will be blocked. The company hardened CI/CD credentials and deployed package provenance validation.

Graph relationships

RELEASED
TanStack -> TanStack AI
TanStack AI is a provider-agnostic TypeScript SDK for streaming chat and tool calling
Source finding
MENTIONS
OpenAI -> TanStack
OpenAI published incident response documenting TanStack Mini Shai-Hulud supply chain attack
Source finding
MENTIONS
TeamPCP -> TanStack
TeamPCP's npm worm attack compromised TanStack among 172 packages.
Source finding
CRITICIZES
Fireship -> TanStack
Fireship explained a TanStack PR that hijacked the NPM registry.
Source finding
MENTIONS
npm -> TanStack
A supply chain attack compromised TanStack packages on npm.
Source finding
MENTIONS
TanStack -> Sigstore
TanStack attack bypassed SLSA/Sigstore verification.

Source trail

TanStack Nx Console extension DEV Community analysis get-shit-done Snyk reports CERT/CC advisory VU#221883 Oxford and UK AISI researchers

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues