LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor1 exploited in the wild

Tanstack

1 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical1
High0
Medium0
Exploited (KEV)1

Patch these first

CVECVSSSeverityProductSummaryPublished
CVE-2026-45321exploited9.6criticaltanstack\/arktype-adapterOn 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages wer162d ago

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-45321exploited9.6criticaltanstack\/arktype-adapterOn 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages wer162d ago

Filter the full tracker by Tanstack →

Our coverage of Tanstack

nation-state

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec has reported that an attack involving the compromise of TanStack's npm packages led to the unauthorized copying of approximately 170 of its private GitHub repositories. The incident, which occurred on May 22, was attributed to the compromise of a former employee's laptop. CrowdSec, a French security company, stated that the employee's GitHub access remained active following their…