Company News
Jerod Santo Joins Socket as Head of Media
Allow myself to introduce... myself.
By Jerod Santo - Sep 14, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@tanstack/start-plugin-core
Advanced tools
This package has malicious versions linked to the ongoing "Mini Shai-Hulud" supply chain attack.
TanStack Start - Plugin Core
This package is not meant to be used directly. It is a dependency of the TanStack Start framework-specific packages:
It provides the core functionality for TanStack Start, which is a fullstack-framework made for SSR, Streaming, Server Functions, API Routes, bundling and more powered by TanStack Router.
Head over to tanstack.com/start for more information about getting started.
FAQs
Modern and scalable routing for React applications
The npm package @tanstack/start-plugin-core receives a total of 10,818,202 weekly downloads. As such, @tanstack/start-plugin-core popularity was classified as popular.
We found that @tanstack/start-plugin-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Package last updated on 09 Sep 2026
Related posts
Research
/Security News
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.
By Kush Pandya - Sep 11, 2026
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
By Sarah Gooding - Sep 10, 2026