Tanstack Compromise Checker
Forensics & Incident ResponseDetects and mitigates the TanStack npm supply‑chain attack across developer machines, repositories, and CI runners
Features
- Scans for dead‑man's switch daemons and persistence mechanisms on macOS/Linux/WSL2/Git Bash
- Checks installed `@tanstack/*` packages against a live list of compromised versions (online mode)
- Audits configuration files, environment variables, and credential stores for stolen tokens
- Runs as a Bash script, Docker container, or GitHub Action with JSON output for CI integration
Recent releases
View all 6 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
shell-script
docker
Platforms
linux
macos
windows
arm64
