CVE-2026-45321

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.

• tanstack tanstack\/arktype-adapter 1.166.12 • tanstack tanstack\/arktype-adapter 1.166.15 • tanstack tanstack\/eslint-plugin-router 1.161.9 • tanstack tanstack\/eslint-plugin-router 1.161.12 • tanstack tanstack\/eslint-plugin-start 0.0.4 • tanstack tanstack\/eslint-plugin-start 0.0.7 • tanstack tanstack\/history 1.161.9 • tanstack tanstack\/history 1.161.12 • tanstack tanstack\/nitro-v2-vite-plugin 1.154.12 • tanstack tanstack\/nitro-v2-vite-plugin 1.154.15 • tanstack tanstack\/react-router 1.169.5 • tanstack tanstack\/react-router 1.169.8 • tanstack tanstack\/react-router-devtools 1.166.16 • tanstack tanstack\/react-router-devtools 1.166.19 • tanstack tanstack\/react-router-ssr-query 1.166.15 • tanstack tanstack\/react-router-ssr-query 1.166.18 • tanstack tanstack\/react-start 1.167.68 • tanstack tanstack\/react-start 1.167.71 • tanstack tanstack\/react-start-client 1.166.51 • tanstack tanstack\/react-start-client 1.166.54 • tanstack tanstack\/react-start-rsc 0.0.47 • tanstack tanstack\/react-start-rsc 0.0.50 • tanstack tanstack\/react-start-server 1.166.55 • tanstack tanstack\/react-start-server 1.166.58 • tanstack tanstack\/router-cli 1.166.46 • tanstack tanstack\/router-cli 1.166.49 • tanstack tanstack\/router-core 1.169.5 • tanstack tanstack\/router-core 1.169.8 • tanstack tanstack\/router-devtools 1.166.16 • tanstack tanstack\/router-devtools 1.166.19 • tanstack tanstack\/router-devtools-core 1.167.6 • tanstack tanstack\/router-devtools-core 1.167.9 • tanstack tanstack\/router-generator 1.166.45 • tanstack tanstack\/router-generator 1.166.48 • tanstack tanstack\/router-plugin 1.167.38 • tanstack tanstack\/router-plugin 1.167.41 • tanstack tanstack\/router-ssr-query-core 1.168.3 • tanstack tanstack\/router-ssr-query-core 1.168.6 • tanstack tanstack\/router-utils 1.161.11 • tanstack tanstack\/router-utils 1.161.14 • tanstack tanstack\/router-vite-plugin 1.166.53 • tanstack tanstack\/router-vite-plugin 1.166.56 • tanstack tanstack\/solid-router 1.169.5 • tanstack tanstack\/solid-router 1.169.8 • tanstack tanstack\/solid-router-devtools 1.166.16 • tanstack tanstack\/solid-router-devtools 1.166.19 • tanstack tanstack\/solid-router-ssr-query 1.166.15 • tanstack tanstack\/solid-router-ssr-query 1.166.18 • tanstack tanstack\/solid-start 1.167.65 • tanstack tanstack\/solid-start 1.167.68 • tanstack tanstack\/solid-start-client 1.166.50 • tanstack tanstack\/solid-start-client 1.166.53 • tanstack tanstack\/solid-start-server 1.166.54 • tanstack tanstack\/solid-start-server 1.166.57 • tanstack tanstack\/start-client-core 1.168.5 • tanstack tanstack\/start-client-core 1.168.8 • tanstack tanstack\/start-fn-stubs 1.161.9 • tanstack tanstack\/start-fn-stubs 1.161.12 • tanstack tanstack\/start-plugin-core 1.169.23 • tanstack tanstack\/start-plugin-core 1.169.26 … and 283 more