Product
React Router
- First Reported
- May 12, 2026
- Latest Reported
- May 12, 2026
Reported Context (1)
- TanStack’s React Router package alone accounts for more than 12 million weekly downloads, placing the malicious code deep within the software supply chain of modern enterprise applications. Mini Shai-Hulud Campaign Injected Credential-Stealing Malware Into Open-Source Packages
Malware (2)
People (3)
Threat Actors (1)
MITRE ATT&CK (6)
Vendors (1)
Products (14)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.