
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@tanstack/start-client-core
Advanced tools
This package is not meant to be used directly. It is a dependency of the TanStack Start framework-specific packages:
It provides the core functionality for TanStack Start, which is a fullstack-framework made for SSR, Streaming, Server Functions, API Routes, bundling and more powered by TanStack Router.
Head over to tanstack.com/start for more information about getting started.
FAQs
Modern and scalable routing for React applications
The npm package @tanstack/start-client-core receives a total of 15,436,368 weekly downloads. As such, @tanstack/start-client-core popularity was classified as popular.
We found that @tanstack/start-client-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.