
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@tanstack/query-core
Advanced tools
React Query is a powerful data fetching and caching library for React. It is built on top of @tanstack/query-core and provides React-specific hooks for data fetching, caching, and updating. It offers similar functionalities but is tailored specifically for React applications.
SWR is a React hooks library for data fetching. It stands for 'stale-while-revalidate' and focuses on providing a fast user experience by returning cached data first and then revalidating it in the background. It is similar to @tanstack/query-core in terms of caching and updating data, but it has a different API and revalidation strategy.
Apollo Client is a comprehensive state management library for JavaScript that enables you to manage both local and remote data with GraphQL. It is more specialized than @tanstack/query-core as it is designed to work with GraphQL APIs and provides advanced features like optimistic UI updates and fine-grained control over the cache.
FAQs
The framework agnostic core that powers TanStack Query
The npm package @tanstack/query-core receives a total of 48,702,427 weekly downloads. As such, @tanstack/query-core popularity was classified as popular.
We found that @tanstack/query-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.