software provenance

Cybersecurity & Risk

TanStack Attack: How SLSA Provenance Was Weaponised Against the CI/CD Trust Chain

⚡ Key Takeaways May 11, 2026: TeamPCP stole GitHub Actions OIDC tokens via cache poisoning, publishing 84 malicious @tanstack npm...