<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[#GitHub links repo breach to #TanStack #npm supply-chain attack]]></title><description><![CDATA[<p><a href="https://mastodon.thenewoil.org/tags/GitHub" rel="tag">#<span>GitHub</span></a> links repo breach to <a href="https://mastodon.thenewoil.org/tags/TanStack" rel="tag">#<span>TanStack</span></a> <a href="https://mastodon.thenewoil.org/tags/npm" rel="tag">#<span>npm</span></a> supply-chain attack</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/" title="GitHub links repo breach to TanStack npm supply-chain attack">
<img src="https://www.bleepstatic.com/content/hl-images/2026/05/21/GitHub_headpic.jpg" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/">
GitHub links repo breach to TanStack npm supply-chain attack
</a>
</h5>
<p class="card-text line-clamp-3">GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.</p>
</div>
<a href="https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://www.bleepstatic.com/favicon/bleeping.ico" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />





<p class="d-inline-block text-truncate mb-0">BleepingComputer <span class="text-secondary">(www.bleepingcomputer.com)</span></p>
</a>
</div></p><p><a href="https://mastodon.thenewoil.org/tags/cybersecurity" rel="tag">#<span>cybersecurity</span></a> <a href="https://mastodon.thenewoil.org/tags/DataBreach" rel="tag">#<span>DataBreach</span></a> <a href="https://mastodon.thenewoil.org/tags/Microsoft" rel="tag">#<span>Microsoft</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/5a32f375-0c1c-4aea-a0d8-f7370dc2b019/github-links-repo-breach-to-tanstack-npm-supply-chain-attack</link><generator>RSS for Node</generator><lastBuildDate>Mon, 25 May 2026 08:07:08 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/5a32f375-0c1c-4aea-a0d8-f7370dc2b019.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 22 May 2026 10:00:02 GMT</pubDate><ttl>60</ttl></channel></rss>