pkg:npm/@tanstack/react-start-server
1 total CVECRITICAL1
✅ Check your installed version
All known vulnerabilities
CRITICAL9.6CVE-2026-45321⚠ KEVMalware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys >= 1.166.55, < 1.166.59