Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: “TanStack”: Malicious Name-Squatting Campaign Steals Environment Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 02 May 2026 02:58:40 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #cybersecurity #data exfiltration #DevSecOps #infosec #npm malware #Postinstall Script #supply chain attack #Svix #TanStack #Typosquatting
Daily CyberSecurity
"TanStack": Malicious Name-Squatting Campaign Steals Environment Secrets
A malicious unscoped "tanstack" npm package used live-debugged postinstall scripts to steal .env secrets via Svix webhooks. Check your dependencies now.
17 views
Daily Writeups
⤷ Title: Supply Chain Siege: 84 TanStack Packages Compromised to Steal GitHub Secrets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 01:37:03 +0000
════════════════════════
⌗ Tags: #Malware #@tanstack/react_router #CI/CD security #credential stealer #GitHub Actions #infosec #JavaScript Security #Malware Analysis #npm Security #Socket Threat Research #supply chain attack #TanStack
Daily CyberSecurity
Supply Chain Siege: 84 TanStack Packages Compromised to Steal GitHub Secrets
Urgent: 84 TanStack npm packages hijacked to harvest GitHub Actions secrets. Over 12M weekly downloads impacted. Audit your CI/CD pipelines and rotate tokens.
22 views
Daily Writeups
⤷ Title: When Open Source Turns Against You: The TanStack npm Supply Chain Attack Explained
════════════════════════
𐀪 Author: Mluqman150
════════════════════════
ⴵ Time: Tue, 12 May 2026 19:51:25 GMT
════════════════════════
⌗ Tags: #hacking #security #npm #tanstack #malware
Medium
When Open Source Turns Against You: The TanStack npm Supply Chain Attack Explained
Modern software development runs on trust.
23 views
Daily Writeups
⤷ Title: Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 14 May 2026 08:12:28 +0000
════════════════════════
⌗ Tags: #Malware #@tanstack #GitHub Actions #InfoSec 2026 #Mini Shai_Hulud #npm security #OIDC #PyPI malware #supply chain attack #tanstack_runner.js #TeamPCP #Trusted Publishing
Penetration Testing Tools
Mini Shai-Hulud Alert: TeamPCP Hijacks @tanstack and PyPI to Poison 12 Million Weekly Downloads
The Mini Shai-Hulud incursion has once again laid siege to the software supply chain. While the initial offensive
16 views
Daily Writeups
⤷ Title: The npm Supply Chain Attack That Hit TanStack — And the 4-Step Fix That Protects You
════════════════════════
𐀪 Author: Code Coup
════════════════════════
ⴵ Time: Thu, 14 May 2026 23:41:25 GMT
════════════════════════
⌗ Tags: #npm #hacking #npm_package #npm_supply_chain_attack #tanstack
Medium
The npm Supply Chain Attack That Hit TanStack — And the 4-Step Fix That Protects You
Supply chain attacks on npm are accelerating. TanStack got hit. More will follow.
25 views
Daily Writeups
⤷ Title: OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:00:50 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlas Browser #ChatGPT #Code_Signing Certificate #Codex #Cybersecurity 2026 #InfoSec News #macOS security #npm Supply Chain Attack #OpenAI #software update #TanStack
Daily CyberSecurity
OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
OpenAI rotates code signing certificates following the TanStack npm breach. macOS users must update ChatGPT and Codex manually before June 12, 2026.
20 views
Daily Writeups
⤷ Title: TanStack Supply Chain Attack Exposes the Hidden Risk of Compromised Developer Credentials
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 19 Sep 2026 14:04:48 GMT
════════════════════════
⌗ Tags: #devsecops #application_security #supply_chain_security #software_security #tanstack
Medium
TanStack Supply Chain Attack Exposes the Hidden Risk of Compromised Developer Credentials
Software supply chain attacks are becoming more concerning because compromising one software component can create consequences far beyond…
27 views
Daily Writeups
⤷ Title: From Refresh Tokens to DevTools: The Evolution of tanstack-fetch 1.3.0 → 1.4.2
════════════════════════
𐀪 Author: Mohammad Garmabi
════════════════════════
ⴵ Time: Wed, 30 Sep 2026 06:41:24 GMT
════════════════════════
⌗ Tags: #hacking #devtools #tanstack_query #tanstack_fetch #nextjs
Medium
From Refresh Tokens to DevTools: The Evolution of tanstack-fetch 1.3.0 → 1.4.2
When I started building tanstack-fetch, the goal was relatively simple:
18 views
Daily Writeups
⤷ Title: TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:31:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102989 #npm #React #Reflected XSS #TanStack #TanStack Start #Web Security
Daily CyberSecurity
TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
TL;DR TanStack has fixed CVE-2026-102989, an unauthenticated reflected XSS flaw rated CVSS 9.3. This TanStack Start vulnerability lets a crafted link run attacker JavaScript on an app’s own …
13 views