Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Snyk: TanStack Supply Chain Attack: OIDC Token Theft Explained

Snyk
06/18/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


in the tanstack namespace. Packages like tanstack-react-router, tanstack-view-router, tanstack-solid-router, react-router alone gets over 12.7 million downloads a week. Here's what makes this attack different from every supply chain attack before it. The attacker did not steal tanstack's credentials. They hijacked the tanstack's legitimate release pipeline mid-workflow and published using tanstack's own trusted identity. The packages shipped with valid salsa or SLSA build level 3 provenance attestations. That's a mouthful, but it's the cryptographic certificates that are supposed to help ensure a package is safe. In this case, those certificates were legitimate. The pipeline was not. The attack chained three vulnerabilities. First, a Pwn request, a pull request that exploited a misconfiguration target in a GitHub actions workflow to run attacker-controlled code in the base repo security context. Second, GitHub actions cache poisoning. The malicious code poisoned the build cache eight hours before the release workflow ran with a key pre-computed from tanstack's public lock file. And third, OIDC token extraction from runner memory. The attacker-controlled binaries read the runner's process memory to steal the OIDC token before the legitimate publish step ever ran. Within hours, the worm had self-propagated to Mistral AI, UiPath, and dozens of other NPM namespaces. By the end of the day, over 170 packages were affected. This is wave four of a campaign called ShyHalut, attributed to a threat group called TeamPCP, which is also linked to the Bitwarden CLI compromise in April and the Aqua Security TriviScanner attack in March.

TL;DR

  • On May 11, 2026, attackers compromised 84 malicious npm package versions across 42 TanStack packages by hijacking the legitimate release pipeline rather than stealing credentials.
  • The attack exploited three chained vulnerabilities: GitHub Actions workflow misconfiguration, cache poisoning, and OIDC token extraction from runner memory to publish with TanStack's trusted identity.
  • Malicious packages shipped with valid SLSA build level 3 provenance attestations, demonstrating that cryptographic certificates alone cannot prevent sophisticated supply chain attacks when the pipeline itself is compromised.

Summary

This briefing examines a sophisticated supply chain attack that compromised 84 malicious npm package versions across 42 TanStack packages on May 11, 2026. Unlike traditional credential theft attacks, this incident exploited GitHub Actions workflows to hijack TanStack's legitimate release pipeline mid-execution. The attacker published malicious packages using TanStack's own trusted identity, complete with valid SLSA build level 3 provenance attestations—cryptographic certificates designed to verify package integrity. The attack chained three distinct vulnerabilities: a Pwn request exploiting GitHub Actions workflow misconfiguration, GitHub Actions cache poisoning executed eight hours before the release workflow, and OIDC token extraction from runner process memory. Within hours, the attack self-propagated to Mistral AI, UiPath, and dozens of other npm namespaces, ultimately affecting over 170 packages. This incident represents wave four of the ShyHalut campaign attributed to TeamPCP, the same threat group linked to the Bitwarden CLI compromise in April 2026 and the Aqua Security TriviScanner attack in March 2026.

Chapters

0:00 - Attack Overview
0:17 - Pipeline Hijacking Method
0:46 - Three-Vulnerability Chain
1:17 - Propagation and Attribution

Key Quotes

0:17 "Here's what makes this attack different from every supply chain attack before it."
0:21 "The attacker did not steal tanstack's credentials. They hijacked the tanstack's legitimate release pipeline mid-workflow and published using tanstack's own trusted identity."
0:37 "That's a mouthful, but it's the cryptographic certificates that are supposed to help ensure a package is safe. In this case, those certificates were legitimate. The pipeline was not."

FAQ

How did this attack differ from typical supply chain compromises?

Instead of stealing credentials, the attacker hijacked TanStack's legitimate release pipeline mid-workflow and published malicious packages using the project's own trusted identity, complete with valid cryptographic certificates that are supposed to verify package safety.

What are the three vulnerabilities that were chained together in this attack?

The attack exploited a Pwn request targeting GitHub Actions workflow misconfiguration, GitHub Actions cache poisoning executed eight hours before the release workflow ran, and OIDC token extraction from runner process memory to steal authentication tokens before the legitimate publish step.


Categories:
  • » Cybersecurity » Application Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Application Security
  • DevSecOps
  • Threat Intelligence
  • Technical Deep Dive
  • Supply Chain Security
  • GitHub Actions Security
  • OIDC Token Theft
  • npm Package Compromise
  • SLSA Provenance
  • Cache Poisoning
  • CI
  • CD Pipeline Security
  • Threat Attribution
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Snyk: TanStack Supply Chain Attack: OIDC Token Theft Explained

              XStreaminars (watch here)

              • Jul
                28

                Illumio + Netskope: Zero Trust in the Age of AI Autonomy

                07/28/202601:00 PM ET
                • Jul
                  29

                  Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

                  07/29/202601:00 PM ET
                  More events

                  Industry Events (watch there)

                  • Jul
                    14

                    Crafting a Championship-Caliber Security Team for Lasting Defense

                    07/14/202601:00 PM ET
                    • Jul
                      14

                      Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data

                      07/14/202602:00 PM ET
                      • Jul
                        22

                        Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

                        07/22/202601:00 PM ET
                        More events

                        Upcoming Webinar Calendar

                        • 07/14/2026
                          01:00 PM
                          07/14/2026
                          Crafting a Championship-Caliber Security Team for Lasting Defense
                          https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-caliber-security-team-for-lasting-defense/
                        • 07/14/2026
                          02:00 PM
                          07/14/2026
                          Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data
                          https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-safeguarding-ai-accessible-data/
                        • 07/21/2026
                          04:00 AM
                          07/21/2026
                          Strategies for Managing AI Governance and Securing App-to-LLM API Traffic
                          https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
                        • 07/22/2026
                          06:30 AM
                          07/22/2026
                          Insights and Strategies in Data Protection and Privacy Management
                          https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-in-data-protection-and-privacy-management/
                        • 07/22/2026
                          01:00 PM
                          07/22/2026
                          Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue
                          https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
                        • 07/28/2026
                          01:00 PM
                          07/28/2026
                          Illumio + Netskope: Zero Trust in the Age of AI Autonomy
                          https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
                        • 07/29/2026
                          04:00 AM
                          07/29/2026
                          Real-Time Strategies for Safeguarding Against Prompt Injections
                          https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
                        • 07/29/2026
                          01:00 PM
                          07/29/2026
                          Ask Your Cloud Anything: Unlocking Governance Silos in your Environments
                          https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
                        • 08/19/2026
                          12:00 PM
                          08/19/2026
                          Becoming Agent Ready: Insights from Cyera's Expertise
                          https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
                        • 09/02/2026
                          12:00 PM
                          09/02/2026
                          Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                          https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                        • 09/30/2026
                          04:00 AM
                          09/30/2026
                          AI Command Center: Optimizing Visibility and Control in Your Operations
                          https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version