A single PR just hijacked the NPM registry...

An attacker exploited a misconfigured GitHub Actions workflow in the Tanstack project by creating a pull request from a fork that triggered the publish workflow with full project permissions, allowing them to poison the build cache with malicious code that was activated when a legitimate PR merged, capturing the NPM publish token and uploading compromised versions of 84 Tanstack packages to the registry. The attack was particularly concerning because the compromised packages were signed and verified using NPM's trusted publishing feature, which was designed to prevent such attacks.

Source: Fireship | 2026-05-14