Versions 1.167.71 and 1.167.68 of @tanstack/react-start were compromised; other versions are not flagged as malicious. CyberXYZ Proxy blocks the affected versions. It also has 2 known vulnerabilities, the worst rated CRITICAL.
Compromised releases. Added to CyberXYZ 2026-05-11, OSV malicious-package feed (Google / OpenSSF).
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it. This package was compromised as part of the "Mini Shai-Hulud is back" worm by the TeamPCP threat actor. The package will steal credentials and then propogate it to every package it has access to. The package also attempts to remain persistent.
Reported by GitHub Advisory Database and Google Open Source Security via OSV.
If one of these versions was installed, remove it and treat the credentials, tokens and SSH keys on that machine as exposed: rotate them. Check CI runners and container images that installed it too.
npm install @tanstack/react-start@1.169.5
OSV recordadvisoryreferencereferencereferencereferencereference
9 direct dependencies
8 carry known advisories, worst CRITICAL
0 packages depend on it
an advisory here reaches each of them
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days, 46th percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-qx66-fv34-fjm8, the advisory selected below
An unauthenticated attacker can craft a URL to a server function in an affected TanStack Start app.
Full advisory text at GitHub advisory or NVD.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Versions 1.167.71 and 1.167.68 of @tanstack/react-start were compromised. Other versions are not flagged as malicious.
Yes. CyberXYZ records 2 known vulnerabilities for @tanstack/react-start (npm), the worst rated CRITICAL. They are GHSA-qx66-fv34-fjm8, GHSA-g7cv-rxg3-hmpx.
Use 1.169.5 or a later release that is not named as malicious. Versions named on this report as malicious must not be installed.
Search @tanstack/react-start in CyberXYZ Check at https://cyberxyz.io/check?q=%40tanstack%2Freact-start. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 15:53 UTC. The most recent advisory here was published 2026-10-15. Updated continuously from NVD, GHSA, OSV and CNA feeds.