#github-actions

Analysis · May 17, 2026 · Colten Anderson

The malware was signed. The signature was real. The package was poison.

TanStack's npm release pipeline published 84 malicious package versions with valid SLSA provenance. The attestation was correct. It just wasn't the question that mattered.