@tanstack/react-start-rsc

0.1.64 · 16 Oct 2026MIT7M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for @tanstack/react-start-rsc. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	0.1.64	No known advisory
	0.0.50	1 open advisory, worst critical

Your version

Critical
Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keysGHSA-g7cv-rxg3-hmpx · 12 May 2026
- 0.0.x0.0.47 – 0.0.50No fix on 0.0.x
Malicious
Malicious code in @tanstack/react-start-rsc (npm)MAL-2026-3470 · 11 May 2026
Named versions only: 0.0.50 · 0.0.47. 0.1.64 is safe.

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.