pkg:npm/@tanstack/react-start
1 total CVECRITICAL1
✅ Check your installed version
All known vulnerabilities
CRITICAL9.6CVE-2026-45321⚠ KEVMalware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys >= 1.167.68, < 1.167.72