CVE-2026-45321

Confirmed PUBLISHED

Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

@tanstack · arktype-adapter, eslint-plugin-router, eslint-plugin-start, history, nitro-v2-vite-plugin, react-router, react-router-devtools, react-router-ssr-query, react-start, react-start-client, react-start-rsc, react-start-server, router-cli, router-core, router-devtools, router-devtools-core, router-generator, router-plugin, router-ssr-query-core, router-utils, outer-vite-plugin, solid-router, solid-router-devtools, solid-router-ssr-query, solid-start, solid-start-client, solid-start-server, start-client-core, start-fn-stubs, start-plugin-core, start-server-core, start-static-server-functions, start-storage-context, valibot-adapter, virtual-file-routes, vue-router, vue-router-devtools, vue-router-ssr-query, vue-start, vue-start-client, vue-start-server, zod-adapter

6 days faster than CISA KEV

Exploited in the wild Used in malware PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

9.6 Critical EPSS 2.3%

At a Glance

On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.

edge cisa malware

CVE Published: May 12, 2026
Exploitation Reported: Jun 01, 2026
CVSS: 9.6 Critical
EPSS: 2.3%

Remote Low complexity Unauthenticated

Affected Versions

84 version rows · page 3 of 4

Vendor	Product	Version	Status
@tanstack	solid-start-client	1.166.50	Affected
@tanstack	solid-start-client	1.166.53	Affected
@tanstack	solid-start-server	1.166.54	Affected
@tanstack	solid-start-server	1.166.57	Affected
@tanstack	start-client-core	1.168.5	Affected
@tanstack	start-client-core	1.168.8	Affected
@tanstack	start-fn-stubs	1.161.9	Affected
@tanstack	start-fn-stubs	1.161.12	Affected
@tanstack	start-plugin-core	1.169.23	Affected
@tanstack	start-plugin-core	1.169.26	Affected
@tanstack	start-server-core	1.167.33	Affected
@tanstack	start-server-core	1.167.36	Affected
@tanstack	start-static-server-functions	1.166.44	Affected
@tanstack	start-static-server-functions	1.166.47	Affected
@tanstack	start-storage-context	1.166.38	Affected
@tanstack	start-storage-context	1.166.41	Affected
@tanstack	valibot-adapter	1.166.12	Affected
@tanstack	valibot-adapter	1.166.15	Affected
@tanstack	virtual-file-routes	1.161.10	Affected
@tanstack	virtual-file-routes	1.161.13	Affected
@tanstack	vue-router	1.169.5	Affected
@tanstack	vue-router	1.169.8	Affected
@tanstack	vue-router-devtools	1.166.16	Affected
@tanstack	vue-router-devtools	1.166.19	Affected
@tanstack	vue-router-ssr-query	1.166.15	Affected

CVE References

https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx github.com · CVE Record https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3...
https://github.com/TanStack/router/issues/7383 github.com · CVE Record https://github.com/TanStack/router/issues/7383
https://tanstack.com/blog/npm-supply-chain-compromise-postmortem tanstack.com · CVE Record https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-spreading-supply-chain-attack-hits-the-npm-ecosystem stepsecurity.io · CVE Record https://www.stepsecurity.io/blog/mini-shai-hulud-is-back-a-self-sprea...

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
The Shadowserver First	2026-05-27 18:00 UTC
CVE	2026-06-01 10:27 UTC
CISA	2026-06-02 14:00 UTC
All CISA Advisories	2026-06-02 14:21 UTC

CVSS Scores

CVSS v3.1 9.6 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitation Status

Exploited in the wild

Recorded 2026-06-01 10:28:01 UTC · CVE

Used in malware

Recorded 2026-06-02 14:00:34 UTC · CVE

Proof of concept available

Recorded 2026-05-25 15:34:23 UTC · GitHub

Weaknesses (CWE)

CWE-506

Embedded Malicious Code

Recent Mentions

CISA Adds Three Known Exploited Vulnerabilities to Catalog

All CISA Advisories · May 27, 2026

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-8398 Daemon Tools Lite Embedded Malicious Code Vulnerability CVE-2026-45321 TanStack Unspecified Vulnerability CVE-2026-48027 Nx Console Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

7whyex/CVE-2026-45321-Tanstack

github · Created 2026-06-25 08:21:49 UTC · 0 stars

adriannurrr/CVE-2026-45321-Tanstack

github · Created 2026-06-21 03:09:12 UTC · 0 stars

renewablehacking/CVE-2026-45321-Tanstack

github · Created 2026-05-25 15:34:23 UTC · 0 stars

Timeline

Key exploitation, disclosure, scanner coverage, and KEV attestation events for this CVE.

2 Jun 2026 14:21 UTC about 2 months ago

2 Jun 2026 14:21 UTC · about 2 months ago

KEV confirmed by All CISA Advisories

Exploitation attested by an external source
2 Jun 2026 14:00 UTC about 2 months ago

2 Jun 2026 14:00 UTC · about 2 months ago

First public exploitation report

Exploit observed in malware
2 Jun 2026 14:00 UTC about 2 months ago

2 Jun 2026 14:00 UTC · about 2 months ago

Added to CISA KEV

Listed in the CISA Known Exploited Vulnerabilities catalog
1 Jun 2026 10:27 UTC about 2 months ago

1 Jun 2026 10:27 UTC · about 2 months ago

KEV confirmed by CVE

Exploitation attested by an external source
27 May 2026 18:00 UTC about 2 months ago

27 May 2026 18:00 UTC · about 2 months ago

Added to KEVIntel KEV Feed

High-confidence, third-party attested exploitation
25 May 2026 15:34 UTC about 2 months ago

25 May 2026 15:34 UTC · about 2 months ago

Public PoC available

Public proof-of-concept code published
12 May 2026 00:12 UTC 2 months ago

12 May 2026 00:12 UTC · 2 months ago

CVE published

Vulnerability disclosed publicly
11 May 2026 20:50 UTC 2 months ago

11 May 2026 20:50 UTC · 2 months ago

CVE ID reserved

Identifier reserved by the CNA

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2026-45321

{
  "cve_id": "CVE-2026-45321",
  "title": "Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub toke...",
  "affected_vendor": "@tanstack",
  "affected_product": "arktype-adapter, eslint-plugin-router, eslint-plugin-start, history, nitro-v2-vite-plugin, react-router, react-router-devtools, react-router-ssr-query, react-start, react-start-client, react-start-rsc, react-start-server, router-cli, router-core, router-devtools, router-devtools-core, router-generator, router-plugin, router-ssr-query-core, router-utils, outer-vite-plugin, solid-router, solid-router-devtools, solid-router-ssr-query, solid-start, solid-start-client, solid-start-server, start-client-core, start-fn-stubs, start-plugin-core, start-server-core, start-static-server-functions, start-storage-context, valibot-adapter, virtual-file-routes, vue-router, vue-router-devtools, vue-router-ssr-query, vue-start, vue-start-client, vue-start-server, zod-adapter",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 9.6,
  "epss_score": 0.02342,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2026-45321

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Virtual Patch

CVSS Scores

Exploitation Status

Weaknesses (CWE)

Recent Mentions

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API