#ParsedReport #CompletenessMedium
28-08-2026

Popular code generator for TanStack Query hit by supply chain worm

https://www.aikido.dev/blog/popular-code-generator-for-tanstack-query-hit-by-supply-chain-worm

Report completeness: Medium

Threats:
Supply_chain_technique
Trinitite
Miasma

Victims:
Software development, Npm packages, Pypi packages, Rubygems packages, Github repositories, Azure cloud services

Geo:
Russian

TTPs:
Tactics: 1
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1027, T1027.013, T1059.004, T1059.006, T1059.007, T1078, T1083, T1105, T1140, T1195.001, have more...

IOCs:
File: 9
Url: 4
Hash: 8

Soft:
TanStack, Node.js, Graph API, HashiCorp Vault, Kubernetes, Ledger Live, Telegram, Discord, Slack, CyberGhost, have more...

Wallets:
exodus_wallet

Algorithms:
xor, aes-128-gcm, sha256

Languages:
python, javascript

Platforms:
intel

Links:
https://github.com/AikidoSec/safe-chain