Company News
Jerod Santo Joins Socket as Head of Media
Allow myself to introduce... myself.
By Jerod Santo - Sep 14, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@tanstack/react-start-client
Advanced tools
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.
TanStack React Start - Client
This package is not meant to be used directly. It is a dependency of @tanstack/react-start.
TanStack React Start is a fullstack-framework made for SSR, Streaming, Server Functions, API Routes, bundling and more powered by TanStack Router.
Head over to tanstack.com/start for more information about getting started.
FAQs
Modern and scalable routing for React applications
The npm package @tanstack/react-start-client receives a total of 10,796,236 weekly downloads. As such, @tanstack/react-start-client popularity was classified as popular.
We found that @tanstack/react-start-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Package last updated on 13 Sep 2026
Related posts
Research
/Security News
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.
By Kush Pandya - Sep 11, 2026
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
By Sarah Gooding - Sep 10, 2026