
By injecting malicious VS Code tasks and Claude Code hooks, the attackers can poison internal repositories and influence subsequent development cycles. This recent supply-chain compromise targeting the @7nohe/openapi-react-query-codegen package illustrates a sophisticated shift in how threat actors exploit the TanStack ecosystem. Instead of a simple data harvest, the attack focused on establishing a persistent presence within the developer’s local environment










