Tag: postinstall-hook

Attack reports, vulnerabilities, indicators and intrusion sets linked to postinstall-hook.

Attack reports (2)

• 140+ npm Packages Compromised in Coordinated Supply Chain Attack · Published 17/06/2026 15:38 · Modified 17/06/2026 20:24
• Four published versions of a fake "tanstack" package uploaded in 27 minutes … · Published 05/05/2026 16:29 · Modified 05/05/2026 16:36