https://cyberpress.org/supply-chain-worm-hits-popular-tanstack-query-code/
Supply-Chain Worm Hits TanStack Query Code Generator Multiple releases of the npm package @7nohe/openapi-react-query-codegen , used to generate type-safe TanStack Query hooks, were reportedly compromised to steal developer credentials. The reported impact includes developer workstations and CI environments, with risks of repository backdoors and poisoned downstream packages.