TanStack published a detailed postmortem of a supply chain attack that compromised 42 npm packages and published 84 malicious versions in just six minutes on May 11. Attackers exploited GitHub Actions cache poisoning and unsafe pull_request_target workflows to mint OIDC tokens capable of publishing directly to npm — without ever stealing npm credentials. The malware harvested cloud credentials (AWS, GCP, Kubernetes, Vault), SSH keys, and GitHub tokens from developer and CI environments, then attempted to self-propagate to other packages maintained by affected developers. External researchers detected the compromise within ~20 minutes. TanStack has since hardened its pipelines by removing unsafe workflow patterns, pinning Actions to immutable SHAs, and adding stricter publishing controls. The incident underscores that modern software supply chains are increasingly attacked through CI/CD pipelines, shared caches, and trusted automation infrastructure rather than direct credential theft.
