TanStack Ecosystem Hit by Sophisticated Multi-Stage Supply-Chain Attack

This compromise underscores the severe risks of misconfiguring GitHub Actions when handling untrusted fork pull requests. The attack's use of chained vulnerabilities and its self-propagating nature represents a significant escalation in the complexity of modern npm supply-chain threats.