Skip to content

Multiagentcognition Cmux-agent-mcp vulnerabilities

tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 moreMalware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysCVE-2026-45321In KEVPublic exploitFix available9.6 CriticalMay 12, 2026