Tanstack Compromise Checker
Forensics & Incident ResponseDetects and scans for the TanStack npm supply‑chain attack across developer machines, repositories, or CI runners
Features
- Checks for dead‑man's switch daemons on macOS/Linux (LaunchAgents, systemd units)
- Scans shell rc files, crontabs and XDG autostart for persistence mechanisms
- Looks for leaked credentials in env vars, npm/yarn config, AWS/GCP/Azure configs, Docker/Kubernetes files
- Identifies malicious `@tanstack/*` packages via version lists or online GHSA advisory queries
- Provides JSON output and suggested pin commands for CI integration
Recent releases
View all 6 releases →Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
shell-script
docker
Platforms
linux
macos
windows
arm64
