pkg:npm/@tanstack/start-plugin-core

1 total CVECRITICAL1

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.6CVE-2026-45321⚠ KEVMalware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
    >= 1.169.23, < 1.169.27