Weaponized Automation: How TanStack's Release Pipeline Was Turned Against Itself

This breach demonstrates a sophisticated evolution in supply chain attacks where legitimate CI/CD infrastructures are manipulated into self-publishing malware without stealing developer credentials. It signals a shift toward infrastructure-level exploits, making the security of automated OIDC tokens and GitHub Actions cache a top priority for developers.