On May 11, 2026, several TanStack packages on npm were briefly replaced with malicious versions, raising fresh concerns about ...