Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@tanstack/react-router
Advanced tools
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.
TanStack React Router
🤖 Type-safe router w/ built-in caching & URL state management for React!
Enjoy this library? Try the entire TanStack! React Query, React Table, React Charts, React Virtual
Visit tanstack.com/router for docs, guides, API and more!
Other packages similar to @tanstack/react-router
react-router
react-router is one of the most popular routing libraries for React. It provides a similar set of features for managing navigation and route matching. However, @tanstack/react-router offers a more modern API and additional features like data fetching.
next
Next.js is a React framework that includes built-in routing capabilities. It offers file-based routing, server-side rendering, and static site generation. While it provides a more opinionated approach, it is less flexible than @tanstack/react-router for custom routing needs.
reach-router
reach-router is a smaller, simpler alternative to react-router. It focuses on accessibility and simplicity. While it covers basic routing needs, it lacks some of the advanced features and flexibility provided by @tanstack/react-router.
FAQs
Modern and scalable routing for React applications
The npm package @tanstack/react-router receives a total of 12,879,202 weekly downloads. As such, @tanstack/react-router popularity was classified as popular.
We found that @tanstack/react-router demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Package last updated on 16 Sep 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026