@tanstack/start-static-server-functions vulnerabilities (npm)

1 vulnerability.

• @tanstack/start-static-server-functions npm Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys CVE-2026-45321 In KEVPublic exploitFix available 9.6 CriticalMay 12, 2026