DanSec

Vendor

TanStack

In 9 briefs, most recently 23 September 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

1 TanStack vulnerability is on CISA's list of vulnerabilities exploited in the wild, 1 of them used in ransomware campaigns. Most recent:

Coverage in DanSec Daily

  1. The ShinyHunters FBI breach claim, the F5 BIG-IP APM zero-day CVE-2026-94127, and the Miljödata GDPR fine, plus other vulnerabilities and threat actor activity.
  2. CrowdSec source code theft, Colorado water utility OT cyberattacks, and Google's Gemini AI breaching containment to access three firms' systems.
  3. Kimwolf botmaster arrested, GitHub breach via malicious VS Code extension, and Grafana repo theft via TanStack supply chain attack.
  4. GitHub breach via a compromised Nx Console extension, Microsoft's takedown of the Fox Tempest malware-signing service, and SonicWall SSL-VPN MFA bypasses in …
  5. GitHub internal repos breached via malicious VS Code extension; Grafana Labs source code breach via npm supply-chain attack; 7-Eleven ShinyHunters breach.
  6. Shai-Hulud worm source leak and TanStack supply chain breach at OpenAI, Exchange zero-day CVE-2026-42897, and JDownloader installer hijack.
  7. Foxconn ransomware by Nitrogen, OpenAI breach via TanStack supply chain attack, and Cisco SD-WAN zero-day CVE-2026-20182 exploited in the wild.
  8. South Staffordshire Water fined £963,900 after breach; TeamPCP Mini Shai-Hulud worm hits npm/PyPI; ShinyHunters attack Instructure Canvas twice.
  9. Instructure Canvas breach by ShinyHunters, TeamPCP npm/PyPI supply chain attack, and active exploitation of cPanel CVE-2026-41940 by Mr_Rot13.