TGViewer
Onix React Onix React @clubreact · 638 subscribers
Post #1293 167
Hardening TanStack After the npm Compromise ⚠️

TanStack shared the security changes they’re making after the recent npm supply-chain attack.

✓ Removed risky GitHub Actions patterns
✓ Improved CI/CD and npm security
✓ Disabled caches and pinned actions
✓ Stronger protection against supply-chain attacks

#webdev #react #programmerlife
Instagram ⏺ YouTube ⏺ Threads ⏺Medium ⏺ X
TanStack Hardening TanStack After the npm Compromise | TanStack Blog A companion to our incident postmortem: what we're changing across the org so the May 11 supply-chain attack can't happen the same way again.
  • 👍 5
  • 🔥 2
  • 🤝 2
More from @clubreact
  1. Oct 9, 2026Repo: Text to CAD 🧊 🔗 earthtojake/text-to-cad This open-source tool lets AI agents gener…
  2. Oct 9, 2026GPT-6 Astra vs GPT-6.1 Sol ⚔️ See how GPT-6 Astra and GPT-6.1 Sol compare in performance,…
  3. Oct 9, 2026Your Skills Need Evaluation 🤖 → Test how coding agents discover and use skills → Evaluate…
  4. Oct 8, 2026Tech Digest This Week 🌐 • Next.js 16.4 - Brings improved caching, smarter prefetching, AI…
  5. Oct 7, 2026Claude Code Skills Directory 🧩 🛠 Explore 400+ curated skills for Claude Code 🔍 Find ski…
  6. Oct 7, 2026How to Document Your Design System 🧩 Learn how to build design system documentation that…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →