TGViewer
Qishloqi 👨‍💻 Qishloqi 👨‍💻 @qishloqi_dev · 56 subscribers
Post #119 604
Packagelarni check qilib qo'yinglar:

https://tanstack.com/blog/npm-supply-chain-compromise-postmortem#appendix-a--affected-versions

https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx

@qishloqi_dev
TanStack Postmortem: TanStack npm supply-chain compromise | TanStack Blog On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm.…
  • 🙏 2
Open in Telegram All posts from @qishloqi_dev
More from @qishloqi_dev
  1. Sep 19, 20264 hours of sleep = 4 shots of espresso. And I'm back at it on a Saturday
  2. Sep 18, 2026I think this is important: https://keepandroidopen.org/
  3. Sep 18, 2026Android 17 is the first since 3.x to add new APIs without releasing to the AOSP Article, C…
  4. Sep 14, 2026@kulgan_kal
  5. Aug 25, 2026Tmuxda bir nechta windowlarda Claude sessionlarni ishlatsangiz qo'l keladi: https://github…
  6. Aug 18, 2026https://caiustheory.com/git-git-git-git-git/
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →