TanStack npm supply-chain attack: how a Dependabot bump spread a worm

· Dev.to