感謝IT之家網(wǎng)友 阿狗 的線索投遞！
IT之家 5 月 12 日消息，網(wǎng)絡(luò)安全檢測機構(gòu) Socket 于當(dāng)?shù)貢r間 5 月 11 日發(fā)出警報，在開源工具庫 TanStack 旗下約 84 個 NPM 軟件包的惡意版本中發(fā)現(xiàn)疑似憑證竊取惡意代碼。
受影響軟件包覆蓋 42 個 @tanstack/* 命名空間下的項目，其中 @tanstack / react-router 的周下載量超 1200 萬次，此類工具包在 NPM 生態(tài)中被廣泛直接或間接引用，使得本次供應(yīng)鏈攻擊具有極廣的傳播范圍。
分析發(fā)現(xiàn)，被篡改的軟件包中新增了一個約 2.3MB、經(jīng)過高強度 JavaScript 混淆的文件 router_init.js，同時 package.json 中增加了一個指向 GitHub 特定提交的 optionalDependencies 依賴項。
該提交來自一個名為 voicproducoes 的 GitHub 賬戶，是一個無歷史記錄的單根提交，包含偽造的包 @tanstack / setup 及其 prepare 生命周期鉤子，后者在被安裝時會執(zhí)行任意惡意代碼。當(dāng)開發(fā)者或 CI 系統(tǒng)執(zhí)行包安裝操作時，該鉤子自動運行，從多個常用位置竊取密鑰、令牌和憑據(jù)，包括 AWS IMDS 與 Secrets Manager、GCP 元數(shù)據(jù)、Kubernetes 服務(wù)賬戶令牌、Vault 令牌、~/.npmrc、GitHub 令牌以及 SSH 私鑰。竊取的數(shù)據(jù)通過 Session / Oxen 加密文件上傳網(wǎng)絡(luò)外泄，攻擊者同時植入持久化監(jiān)控組件，能夠在受害者機器上維持長期訪問。
TanStack 在事后技術(shù)復(fù)盤中將攻擊鏈歸因于三種 GitHub Actions 漏洞的組合利用：攻擊者利用 pull_request_target“Pwn Request”模式、跨 fork 緩存投毒以及從 GitHub Actions 運行器進程的內(nèi)存中實時提取 OIDC 令牌。
在此過程中，NPM 憑證并未泄露，合法發(fā)布工作流也未遭攻破，惡意發(fā)布是通過項目的 OIDC 受信任發(fā)布者綁定進行身份驗證后直接推送到 NPM 注冊表完成的。
官方同時聲明，受影響成員賬戶均啟用了雙重身份驗證，但攻擊者利用 Git 環(huán)境下孤兒提交方式繞過了現(xiàn)有的發(fā)布保護機制。所有惡意版本已被棄用，TanStack 已聯(lián)系 NPM 安全團隊從注冊表中移除惡意壓縮包，GitHub Actions 緩存條目也已清理。
本次攻擊被安全機構(gòu)歸為正在蔓延的大規(guī)模“Mini Shai-Hulud”供應(yīng)鏈攻擊的一部分。此前該攻擊曾針對 SAP 生態(tài)系統(tǒng)的 NPM 包，現(xiàn)已擴展為波及更廣泛的 NPM 投毒活動。
據(jù)不完全統(tǒng)計，目前已受影響的軟件包覆蓋 @squawk、@tanstack、@uipath、@tallyui、@beproduct、@mistralai 等多個命名空間，共計超過 160 個包名、近 373 個惡意版本條目。
其中 @mistralai / mistralai（官方 TypeScript 客戶端）和 @uipath / apollo-core 等企業(yè)級工具包亦被植入同類型竊取憑證的蠕蟲，采用相同的下載 Bun 運行時并執(zhí)行惡意載荷的傳播機制。
| 軟件包 | 版本 | ||
| pypi | mistralai | 2.4.6 | |
| pypi | mistralai | 2.4.6 | |
| npm | @opensearch-project | opensearch | 3.5.3 |
| npm | @opensearch-project | opensearch | 3.8.0 |
| npm | @opensearch-project | opensearch | 3.7.0 |
| pypi | guardrails-ai | 0.10.1 | |
| pypi | guardrails-ai | 0.10.1 | |
| npm | @opensearch-project | opensearch | 3.6.2 |
| npm | cross-stitch | 1.1.7 | |
| npm | @squawk | fix-data | 0.6.8 |
| npm | @squawk | weather | 0.5.10 |
| npm | @squawk | icao-registry-data | 0.8.8 |
| npm | @squawk | airport-data | 0.7.8 |
| npm | @squawk | flightplan | 0.5.6 |
| npm | @squawk | units | 0.4.7 |
| npm | @squawk | flight-math | 0.5.8 |
| npm | @squawk | mcp | 0.9.5 |
| npm | @squawk | fixes | 0.3.6 |
| npm | @squawk | airspace-data | 0.5.7 |
| npm | @squawk | procedure-data | 0.7.7 |
| npm | @squawk | navaids | 0.4.6 |
| npm | @squawk | procedures | 0.5.6 |
| npm | @squawk | notams | 0.3.10 |
| npm | @squawk | airways | 0.4.6 |
| npm | @squawk | airports | 0.6.6 |
| npm | ts-dna | 3.0.5 | |
| npm | @squawk | types | 0.8.5 |
| npm | @squawk | icao-registry | 0.5.6 |
| npm | @squawk | airspace | 0.8.5 |
| npm | @squawk | geo | 0.4.8 |
| npm | @squawk | navaid-data | 0.6.8 |
| npm | @squawk | airway-data | 0.5.8 |
| npm | @mistralai | mistralai | 2.2.4 |
| npm | @squawk | mcp | 0.9.4 |
| npm | @squawk | types | 0.8.3 |
| npm | @beproduct | nestjs-auth | 0.1.18 |
| npm | @squawk | airspace-data | 0.5.5 |
| npm | ts-dna | 3.0.4 | |
| npm | git-git-git | 1.0.12 | |
| npm | @squawk | airway-data | 0.5.7 |
| npm | @squawk | airports | 0.6.5 |
| npm | git-branch-selector | 1.3.7 | |
| npm | @tallyui | pos | 0.1.3 |
| npm | @tallyui | connector-vendure | 1.0.3 |
| npm | cross-stitch | 1.1.5 | |
| npm | @supersurkhet | cli | 0.0.7 |
| npm | @squawk | mcp | 0.9.3 |
| npm | @squawk | flightplan | 0.5.5 |
| npm | @squawk | fix-data | 0.6.7 |
| npm | @squawk | airspace-data | 0.5.6 |
| npm | git-branch-selector | 1.3.6 | |
| npm | @taskflow-corp | cli | 0.1.29 |
| npm | @squawk | icao-registry-data | 0.8.6 |
| npm | @squawk | geo | 0.4.7 |
| npm | @squawk | airport-data | 0.7.7 |
| npm | @squawk | weather | 0.5.8 |
| npm | @squawk | geo | 0.4.6 |
| npm | @squawk | flight-math | 0.5.7 |
| npm | @squawk | icao-registry | 0.5.5 |
| npm | @beproduct | nestjs-auth | 0.1.19 |
| npm | nextmove-mcp | 0.1.7 | |
| npm | @squawk | airways | 0.4.4 |
| npm | @tolka | cli | 1.0.5 |
| npm | @squawk | airways | 0.4.5 |
| npm | @squawk | fixes | 0.3.5 |
| npm | cmux-agent-mcp | 0.1.8 | |
| npm | @tallyui | connector-shopify | 1.0.3 |
| npm | @squawk | flight-math | 0.5.6 |
| npm | @squawk | icao-registry | 0.5.4 |
| npm | @tallyui | components | 1.0.3 |
| npm | @squawk | navaids | 0.4.5 |
| npm | cross-stitch | 1.1.6 | |
| npm | @squawk | notams | 0.3.9 |
| npm | @squawk | notams | 0.3.8 |
| npm | @tallyui | theme | 0.2.3 |
| npm | @squawk | navaids | 0.4.4 |
| npm | wot-api | 0.8.3 | |
| npm | @squawk | icao-registry-data | 0.8.7 |
| npm | @tolka | cli | 1.0.6 |
| npm | @supersurkhet | sdk | 0.0.7 |
| npm | @squawk | airspace | 0.8.3 |
| npm | @squawk | procedure-data | 0.7.5 |
| npm | @squawk | types | 0.8.4 |
| npm | @squawk | units | 0.4.5 |
| npm | @squawk | airspace | 0.8.4 |
| npm | @squawk | procedures | 0.5.4 |
| npm | @squawk | flightplan | 0.5.4 |
| npm | @squawk | fixes | 0.3.4 |
| npm | @squawk | procedures | 0.5.5 |
| npm | @tallyui | storage-sqlite | 0.2.3 |
| npm | @tallyui | connector-woocommerce | 1.0.3 |
| npm | @squawk | units | 0.4.6 |
| npm | @tallyui | database | 1.0.3 |
| npm | @squawk | navaid-data | 0.6.7 |
| npm | @squawk | airport-data | 0.7.6 |
| npm | @squawk | procedure-data | 0.7.6 |
| npm | @squawk | airports | 0.6.4 |
| npm | @tallyui | connector-medusa | 1.0.3 |
| npm | @squawk | airway-data | 0.5.6 |
| npm | git-git-git | 1.0.11 | |
| npm | nextmove-mcp | 0.1.6 | |
| npm | wot-api | 0.8.4 | |
| npm | @squawk | weather | 0.5.9 |
| npm | ts-dna | 3.0.3 | |
| npm | @squawk | navaid-data | 0.6.6 |
| npm | @squawk | fix-data | 0.6.6 |
| npm | @tallyui | core | 0.2.3 |
| npm | @mistralai | mistralai | 2.2.3 |
| npm | @mistralai | mistralai | 2.2.2 |
| npm | @mistralai | mistralai-azure | 1.7.3 |
| npm | @mistralai | mistralai-gcp | 1.7.3 |
| npm | git-git-git | 1.0.10 | |
| npm | nextmove-mcp | 0.1.5 | |
| npm | @supersurkhet | sdk | 0.0.6 |
| npm | @taskflow-corp | cli | 0.1.28 |
| npm | cmux-agent-mcp | 0.1.7 | |
| npm | @squawk | mcp | 0.9.2 |
| npm | cross-stitch | 1.1.4 | |
| npm | @supersurkhet | cli | 0.0.6 |
| npm | @squawk | airspace-data | 0.5.4 |
| npm | @tallyui | theme | 0.2.2 |
| npm | @squawk | types | 0.8.2 |
| npm | @squawk | geo | 0.4.5 |
| npm | @tallyui | connector-medusa | 1.0.2 |
| npm | @squawk | airspace | 0.8.2 |
| npm | @tallyui | connector-woocommerce | 1.0.2 |
| npm | @squawk | airway-data | 0.5.5 |
| npm | @tallyui | pos | 0.1.2 |
| npm | @tallyui | components | 1.0.2 |
| npm | @squawk | flight-math | 0.5.5 |
| npm | @squawk | fix-data | 0.6.5 |
| npm | @squawk | fixes | 0.3.3 |
| npm | @tallyui | connector-vendure | 1.0.2 |
| npm | @squawk | procedures | 0.5.3 |
| npm | @squawk | weather | 0.5.7 |
| npm | @squawk | icao-registry | 0.5.3 |
| npm | @tallyui | database | 1.0.2 |
| npm | @squawk | airways | 0.4.3 |
| npm | @squawk | airport-data | 0.7.5 |
| npm | @squawk | flightplan | 0.5.3 |
| npm | @tallyui | connector-shopify | 1.0.2 |
| npm | @tallyui | storage-sqlite | 0.2.2 |
| npm | ts-dna | 3.0.2 | |
| npm | wot-api | 0.8.2 | |
| npm | @squawk | units | 0.4.4 |
| npm | @squawk | procedure-data | 0.7.4 |
| npm | @squawk | navaid-data | 0.6.5 |
| npm | @squawk | notams | 0.3.7 |
| npm | @squawk | icao-registry-data | 0.8.5 |
| npm | @squawk | airports | 0.6.3 |
| npm | @squawk | navaids | 0.4.3 |
| npm | @beproduct | nestjs-auth | 0.1.17 |
| npm | git-branch-selector | 1.3.5 | |
| npm | @tolka | cli | 1.0.4 |
| npm | @mistralai | mistralai-gcp | 1.7.1 |
| npm | @mistralai | mistralai-gcp | 1.7.2 |
| npm | @mistralai | mistralai-azure | 1.7.1 |
| npm | @mistralai | mistralai-azure | 1.7.2 |
| npm | @tallyui | core | 0.2.2 |
| npm | @mesadev | saguaro | 0.4.22 |
| npm | @mesadev | sdk | 0.28.3 |
| npm | @mesadev | rest | 0.28.3 |
| npm | cross-stitch | 1.1.3 | |
| npm | ts-dna | 3.0.1 | |
| npm | @squawk | mcp | 0.9.1 |
| npm | wot-api | 0.8.1 | |
| npm | @squawk | notams | 0.3.6 |
| npm | @squawk | airways | 0.4.2 |
| npm | @squawk | flightplan | 0.5.2 |
| npm | @squawk | weather | 0.5.6 |
| npm | @squawk | flight-math | 0.5.4 |
| npm | @squawk | airway-data | 0.5.4 |
| npm | @squawk | procedures | 0.5.2 |
| npm | @squawk | icao-registry-data | 0.8.4 |
| npm | @squawk | units | 0.4.3 |
| npm | @squawk | navaids | 0.4.2 |
| npm | @squawk | types | 0.8.1 |
| npm | @squawk | fix-data | 0.6.4 |
| npm | @squawk | navaid-data | 0.6.4 |
| npm | @squawk | icao-registry | 0.5.2 |
| npm | @squawk | fixes | 0.3.2 |
| npm | @squawk | geo | 0.4.4 |
| npm | @squawk | procedure-data | 0.7.3 |
| npm | @squawk | airspace-data | 0.5.3 |
| npm | @squawk | airports | 0.6.2 |
| npm | @squawk | airspace | 0.8.1 |
| npm | @squawk | airport-data | 0.7.4 |
| npm | @tolka | cli | 1.0.3 |
| npm | git-branch-selector | 1.3.4 | |
| npm | nextmove-mcp | 0.1.4 | |
| npm | git-git-git | 1.0.9 | |
| npm | @tallyui | theme | 0.2.1 |
| npm | @tallyui | pos | 0.1.1 |
| npm | @tallyui | connector-medusa | 1.0.1 |
| npm | @tallyui | components | 1.0.1 |
| npm | @tallyui | connector-shopify | 1.0.1 |
| npm | @tallyui | core | 0.2.1 |
| npm | @tallyui | database | 1.0.1 |
| npm | @tallyui | connector-vendure | 1.0.1 |
| npm | @tallyui | storage-sqlite | 0.2.1 |
| npm | @tallyui | connector-woocommerce | 1.0.1 |
| npm | @uipath | apollo-react | 4.24.5 |
| npm | @uipath | agent.sdk | 0.0.18 |
| npm | @uipath | apollo-core | 5.9.2 |
| npm | @uipath | apollo-wind | 2.16.2 |
| npm | @uipath | tool-workflowcompiler | 0.0.12 |
| npm | @uipath | filesystem | 1.0.1 |
| npm | @uipath | robot | 1.3.4 |
| npm | @uipath | telemetry | 0.0.7 |
| npm | @uipath | integrationservice-sdk | 1.0.2 |
| npm | @uipath | ap-chat | 1.5.7 |
| npm | @uipath | widget.sdk | 1.2.3 |
| npm | @uipath | agent-sdk | 1.0.2 |
| npm | @uipath | packager-tool-apiworkflow | 0.0.19 |
| npm | @uipath | case-tool | 1.0.1 |
| npm | @uipath | codedagents-tool | 0.1.12 |
| npm | @uipath | api-workflow-tool | 1.0.1 |
| npm | @uipath | context-grounding-tool | 0.1.1 |
| npm | @uipath | packager-tool-workflowcompiler-browser | 0.0.34 |
| npm | @uipath | packager-tool-workflowcompiler | 0.0.16 |
| npm | @uipath | aops-policy-tool | 0.3.1 |
| npm | @uipath | flow-tool | 1.0.2 |
| npm | @uipath | resourcecatalog-tool | 0.1.1 |
| npm | @uipath | vertical-solutions-tool | 1.0.1 |
| npm | @uipath | data-fabric-tool | 1.0.2 |
| npm | @uipath | packager-tool-case | 0.0.9 |
| npm | @uipath | codedagent-tool | 1.0.1 |
| npm | @uipath | ui-widgets-multi-file-upload | 1.0.1 |
| npm | @uipath | docsai-tool | 1.0.1 |
| npm | @uipath | insights-tool | 1.0.1 |
| npm | @uipath | solutionpackager-sdk | 1.0.11 |
| npm | @uipath | auth | 1.0.1 |
| npm | @uipath | maestro-tool | 1.0.1 |
| npm | @uipath | cli | 1.0.1 |
| npm | @uipath | llmgw-tool | 1.0.1 |
| npm | @uipath | resource-tool | 1.0.1 |
| npm | @uipath | packager-tool-flow | 0.0.19 |
| npm | @uipath | common | 1.0.1 |
| npm | @uipath | gov-tool | 0.3.1 |
| npm | @uipath | traces-tool | 1.0.1 |
| npm | @uipath | packager-tool-bpmn | 0.0.9 |
| npm | @uipath | insights-sdk | 1.0.1 |
| npm | @uipath | admin-tool | 0.1.1 |
| npm | @uipath | packager-tool-webapp | 1.0.6 |
| npm | @uipath | solutionpackager-tool-core | 0.0.34 |
| npm | @uipath | vss | 0.1.6 |
| npm | @uipath | orchestrator-tool | 1.0.1 |
| npm | @uipath | solution-packager | 0.0.35 |
| npm | @uipath | uipath-python-bridge | 1.0.1 |
| npm | @uipath | codedapp-tool | 1.0.1 |
| npm | @uipath | project-packager | 1.1.16 |
| npm | @uipath | integrationservice-tool | 1.0.2 |
| npm | @uipath | packager-tool-functions | 0.1.1 |
| npm | @uipath | tasks-tool | 1.0.1 |
| npm | @uipath | solution-tool | 1.0.1 |
| npm | @uipath | packager-tool-connector | 0.0.19 |
| npm | @uipath | maestro-sdk | 1.0.1 |
| npm | @uipath | test-manager-tool | 1.0.2 |
| npm | @uipath | agent-tool | 1.0.1 |
| npm | @uipath | functions-tool | 1.0.1 |
| npm | @uipath | identity-tool | 0.1.1 |
| npm | @uipath | access-policy-tool | 0.3.1 |
| npm | @uipath | resources-tool | 0.1.11 |
| npm | @uipath | rpa-tool | 0.9.5 |
| npm | @uipath | rpa-legacy-tool | 1.0.1 |
| npm | @uipath | access-policy-sdk | 0.3.1 |
| npm | @uipath | platform-tool | 1.0.1 |
| npm | @beproduct | nestjs-auth | 0.1.16 |
| npm | @beproduct | nestjs-auth | 0.1.15 |
| npm | @dirigible-ai | sdk | 0.6.3 |
| npm | @dirigible-ai | sdk | 0.6.2 |
| npm | @beproduct | nestjs-auth | 0.1.13 |
| npm | @beproduct | nestjs-auth | 0.1.14 |
| npm | @beproduct | nestjs-auth | 0.1.8 |
| npm | @beproduct | nestjs-auth | 0.1.6 |
| npm | @beproduct | nestjs-auth | 0.1.9 |
| npm | @beproduct | nestjs-auth | 0.1.2 |
| npm | @beproduct | nestjs-auth | 0.1.5 |
| npm | @beproduct | nestjs-auth | 0.1.11 |
| npm | @beproduct | nestjs-auth | 0.1.4 |
| npm | @beproduct | nestjs-auth | 0.1.3 |
| npm | @beproduct | nestjs-auth | 0.1.7 |
| npm | @beproduct | nestjs-auth | 0.1.10 |
| npm | @beproduct | nestjs-auth | 0.1.12 |
| npm | @ml-toolkit-ts | preprocessing | 1.0.2 |
| npm | @ml-toolkit-ts | preprocessing | 1.0.3 |
| npm | @ml-toolkit-ts | xgboost | 1.0.3 |
| npm | ml-toolkit-ts | 1.0.5 | |
| npm | @ml-toolkit-ts | xgboost | 1.0.4 |
| npm | ml-toolkit-ts | 1.0.4 | |
| npm | agentwork-cli | 0.1.4 | |
| npm | agentwork-cli | 0.1.5 | |
| npm | @taskflow-corp | cli | 0.1.27 |
| npm | cmux-agent-mcp | 0.1.6 | |
| npm | @supersurkhet | cli | 0.0.5 |
| npm | @supersurkhet | sdk | 0.0.5 |
| npm | @taskflow-corp | cli | 0.1.26 |
| npm | @supersurkhet | cli | 0.0.4 |
| npm | cmux-agent-mcp | 0.1.5 | |
| npm | @supersurkhet | sdk | 0.0.4 |
| npm | @draftlab | auth | 0.24.2 |
| npm | @draftlab | auth | 0.24.1 |
| npm | @draftauth | core | 0.13.1 |
| npm | @draftauth | core | 0.13.2 |
| npm | @draftauth | client | 0.2.2 |
| npm | @draftauth | client | 0.2.1 |
| npm | @draftlab | db | 0.16.2 |
| npm | safe-action | 0.8.4 | |
| npm | @draftlab | auth-router | 0.5.1 |
| npm | @draftlab | auth-router | 0.5.2 |
| npm | @draftlab | db | 0.16.1 |
| npm | safe-action | 0.8.3 | |
| npm | @taskflow-corp | cli | 0.1.25 |
| npm | cmux-agent-mcp | 0.1.4 | |
| npm | @supersurkhet | cli | 0.0.3 |
| npm | @supersurkhet | sdk | 0.0.3 |
| npm | @taskflow-corp | cli | 0.1.24 |
| npm | @supersurkhet | cli | 0.0.2 |
| npm | cmux-agent-mcp | 0.1.3 | |
| npm | @supersurkhet | sdk | 0.0.2 |
| npm | git-git-git | 1.0.8 | |
| npm | @tolka | cli | 1.0.2 |
| npm | git-branch-selector | 1.3.3 | |
| npm | nextmove-mcp | 0.1.3 | |
| npm | @tanstack | react-router | 1.169.8 |
| npm | @tanstack | solid-router | 1.169.8 |
| npm | @tanstack | router-core | 1.169.8 |
| npm | @tanstack | start-plugin-core | 1.169.26 |
| npm | @tanstack | vue-router | 1.169.8 |
| npm | @tanstack | router-plugin | 1.167.41 |
| npm | @tanstack | vue-start-client | 1.166.49 |
| npm | @tanstack | react-start-rsc | 0.0.50 |
| npm | @tanstack | start-client-core | 1.168.8 |
| npm | @tanstack | eslint-plugin-start | 0.0.7 |
| npm | @tanstack | react-start | 1.167.71 |
| npm | @tanstack | router-generator | 1.166.48 |
| npm | @tanstack | eslint-plugin-router | 1.161.12 |
| npm | @tanstack | router-devtools-core | 1.167.9 |
| npm | @tanstack | vue-start | 1.167.64 |
| npm | @tanstack | start-server-core | 1.167.36 |
| npm | @tanstack | solid-start-server | 1.166.57 |
| npm | @tanstack | start-storage-context | 1.166.41 |
| npm | @tanstack | solid-start-client | 1.166.53 |
| npm | @tanstack | solid-start | 1.167.68 |
| npm | @tanstack | router-ssr-query-core | 1.168.6 |
| npm | @tanstack | virtual-file-routes | 1.161.13 |
| npm | @tanstack | react-router-ssr-query | 1.166.18 |
| npm | @tanstack | nitro-v2-vite-plugin | 1.154.15 |
| npm | @tanstack | vue-start-server | 1.166.53 |
| npm | @tanstack | solid-router-ssr-query | 1.166.18 |
| npm | @tanstack | react-start-server | 1.166.58 |
| npm | @tanstack | react-start-client | 1.166.54 |
| npm | @tanstack | start-fn-stubs | 1.161.12 |
| npm | @tanstack | router-utils | 1.161.14 |
| npm | @tanstack | react-router-devtools | 1.166.19 |
| npm | @tanstack | solid-router-devtools | 1.166.19 |
| npm | @tanstack | history | 1.161.12 |
| npm | @tanstack | router-cli | 1.166.49 |
| npm | @tanstack | arktype-adapter | 1.166.15 |
| npm | @tanstack | vue-router-devtools | 1.166.19 |
| npm | @tanstack | zod-adapter | 1.166.15 |
| npm | @tanstack | vue-router-ssr-query | 1.166.18 |
| npm | @tanstack | start-static-server-functions | 1.166.47 |
| npm | @tanstack | router-vite-plugin | 1.166.56 |
| npm | @tanstack | valibot-adapter | 1.166.15 |
| npm | @tanstack | router-devtools | 1.166.19 |
| npm | @tanstack | solid-router | 1.169.5 |
| npm | @tanstack | start-plugin-core | 1.169.23 |
| npm | @tanstack | router-core | 1.169.5 |
| npm | @tanstack | vue-router | 1.169.5 |
| npm | @tanstack | react-router | 1.169.5 |
| npm | @tanstack | router-plugin | 1.167.38 |
| npm | @tanstack | eslint-plugin-start | 0.0.4 |
| npm | @tanstack | eslint-plugin-router | 1.161.9 |
| npm | @tanstack | react-start-rsc | 0.0.47 |
| npm | @tanstack | react-start | 1.167.68 |
| npm | @tanstack | router-generator | 1.166.45 |
| npm | @tanstack | start-client-core | 1.168.5 |
| npm | @tanstack | router-devtools-core | 1.167.6 |
| npm | @tanstack | router-utils | 1.161.11 |
| npm | @tanstack | vue-router-ssr-query | 1.166.15 |
| npm | @tanstack | arktype-adapter | 1.166.12 |
| npm | @tanstack | start-server-core | 1.167.33 |
| npm | @tanstack | solid-start | 1.167.65 |
| npm | @tanstack | react-router-devtools | 1.166.16 |
| npm | @tanstack | solid-router-devtools | 1.166.16 |
| npm | @tanstack | router-cli | 1.166.46 |
| npm | @tanstack | solid-start-server | 1.166.54 |
| npm | @tanstack | vue-router-devtools | 1.166.16 |
| npm | @tanstack | virtual-file-routes | 1.161.10 |
| npm | @tanstack | router-ssr-query-core | 1.168.3 |
| npm | @tanstack | router-vite-plugin | 1.166.53 |
| npm | @tanstack | nitro-v2-vite-plugin | 1.154.12 |
| npm | @tanstack | start-fn-stubs | 1.161.9 |
| npm | @tanstack | history | 1.161.9 |
| npm | @tanstack | react-router-ssr-query | 1.166.15 |
| npm | @tanstack | zod-adapter | 1.166.12 |
| npm | @tanstack | valibot-adapter | 1.166.12 |
| npm | @tanstack | solid-router-ssr-query | 1.166.15 |
| npm | @tanstack | react-start-client | 1.166.51 |
| npm | @tanstack | router-devtools | 1.166.16 |
| npm | @tanstack | react-start-server | 1.166.55 |
| npm | @tanstack | solid-start-client | 1.166.50 |
| npm | @tanstack | vue-start | 1.167.61 |
| npm | @tanstack | start-storage-context | 1.166.38 |
| npm | @tanstack | start-static-server-functions | 1.166.44 |
| npm | @tanstack | vue-start-client | 1.166.46 |
| npm | @tanstack | vue-start-server | 1.166.50 |
| composer | intercom | intercom-php | 5.0.2 |
| npm | intercom-client | 7.0.4 | |
| pypi | lightning | 2.6.3 | |
| pypi | lightning | 2.6.2 | |
| npm | @cap-js | db-service | 2.10.1 |
| npm | @cap-js | postgres | 2.2.2 |
| npm | @cap-js | sqlite | 2.2.2 |
| npm | mbt | 1.2.48 | |
對于開發(fā)者和運維團隊，官方與安全機構(gòu)給出了多項立即執(zhí)行的應(yīng)急措施：
對受影響的安裝主機，應(yīng)立即按優(yōu)先級輪換 NPM 令牌、GitHub 個人訪問令牌、云服務(wù)密鑰（IT之家注：AWS / GCP / Azure）、Kubernetes 服務(wù)賬戶令牌以及 SSH 私鑰；
審查開發(fā)者和項目根目錄下的.claude/ 與.vscode/ 文件夾，移除 router_runtime.js 等陌生條目；
使用 git log --all --author=claude@users.noreply.github.com 審核倉庫是否存在未授權(quán)的提交；
限制 GitHub Actions 中 OIDC 令牌的作用域，對所有不需要 OIDC 發(fā)布的工作流設(shè)置 permissions: id-token:none；
此外，開發(fā)者不應(yīng)單純信任 Sigstore 來源證明作為安全信號，因為攻擊者在具備 GitHub Actions 執(zhí)行能力后，同樣能夠生成有效的 Sigstore 證明用于惡意包。
安全團隊通過 SHA-256 校驗命令 shasum -a 256 在所有依賴樹中搜索標(biāo)識為 ab4fcada…… 的 router_init.js 文件，亦可用于確認(rèn)是否引入惡意版本。
廣告聲明：文內(nèi)含有的對外跳轉(zhuǎn)鏈接（包括不限于超鏈接、二維碼、口令等形式），用于傳遞更多信息，節(jié)省甄選時間，結(jié)果僅供參考，IT之家所有文章均包含本聲明。