When the May 2026 TanStack compromise produced validly-attested malicious packages, it exposed a gap between what provenance proves and what security requires.
Supply Chain Attacks Bypassed Every Trust…
When the May 2026 TanStack compromise produced validly-attested malicious packages, it exposed a gap between what provenance proves and what security requires.