Tanstack Query vulnerabilities

• tanstack, @tanstack arktype-adapter, eslint-plugin-router +211 more +213 more Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys CVE-2026-45321 In KEVPublic exploitFix available 9.6 CriticalMay 12, 2026
• tanstack query, react-query-next-experimental +1 more react-query-streamed-hydration xss CVE-2024-24558 Fix available 8.2 HighJanuary 30, 2024