Mastodawn

Anne Ruskamp, Brian Zimmer, Javier Lozano, Rob Richardson and Kevin Van Cott have full-day Workshops at Nebraska.Code() July 22nd.

https://nebraskacode.amegala.com/

#TechnologyWorkshop #JavaScript #OSS #TanStack #FrontEnd #Cloud #OpenSource #Kubernetes #Docker #AzureContainerService #AKS #API #MCP #LLM #ProductLifecycle #ProjectManagement #Scrum #Nebraska #DontPanicLabs #DevConf #SiliconPrairie

Frontend Dogma Jun 9

React Server Components in TanStack, by @adamrackis.bsky.social (@frontendmasters.com):

https://frontendmasters.com/blog/react-server-components-in-tanstack/?ref=frontenddogma.com

#react #components #tanstack

React Server Components in TanStack – Frontend Masters Blog

RSCs in TanStack Start are server-only executed code — perhaps a significant improvement over the Next.js implementation.

Nils Hartmann Jun 9

Serverseitige oder clientseitige #Webanwendung? "Fullstack" #React Frameworks versprechen das Beste aus beiden Welten... Ob's stimmt? 🤔

Hier findet ihr Slides und Code meiner #TanStack #Start Anwendung meines Vortrags auf dem Karlsruher Entwicklertag:

👉 https://nilshartmann.net/t/getting-started-fullstack-anwendungen-mit-react-und-tan-stack-karlsruher-entwicklertag

#etka26

Frontend Dogma Jun 4

The Modern React Stack Explained for 2026, by @jsdevspace:

https://jsdev.space/react-stack-2026/?ref=frontenddogma.com

#react #techstacks #comparisons #nextjs #tanstack #remix #vite #tooling

Best React Libraries and Tools in 2026

A complete guide to the modern React ecosystem in 2026, covering frameworks, forms, state management, UI libraries, testing, and developer tooling.

JavaScript Development Space

Frontend Dogma Jun 4

Postmortem: TanStack npm Supply-Chain Compromise, by @tannerlinsley.com (@tanstack.com):

https://tanstack.com/blog/npm-supply-chain-compromise-postmortem?ref=frontenddogma.com

#tanstack #npm

Postmortem: TanStack npm supply-chain compromise | TanStack Blog

On 2026-05-11, an attacker chained a pull_request_target Pwn Request, GitHub Actions cache poisoning across the fork↔base trust boundary, and OIDC token extraction from runner memory to publish 84 malicious versions across 42 @tanstack/* packages on npm. Full postmortem.

Inautilo Jun 2

#Development #Approaches
The best loading states are none at all · Making the case for route transitions https://ilo.im/16dcdk

_____
#Preloading #Loading #Routing #Spinners #Skeletons #SPAs #TanStack #WebPerf #WebDev #Frontend

The Best Loading States Are No Loading States

Most applications end up with all sorts of UI whose sole purpose is to occupy the space where data should eventually appear. We're all spending a surprising amount of time solving the same problem, and none of it is really product work.

Nils Hartmann May 27

👀 Was haben Tierbetreuung, #React und #TanStack Start gemeinsam? 🤔

Werden wir im Juni gemeinsam herausfinden 🕵️‍♂️:

- Karlsruher Entwicklertag: https://nilshartmann.net/t/getting-started-fullstack-anwendungen-mit-react-und-tan-stack-karlsruher-entwicklertag

- #EnterJS: https://nilshartmann.net/t/getting-started-fullstack-anwendungen-mit-react-und-tan-stack-enter-js

Kommt vorbei! 👋

CyberNetsecIO May 24

📰 TeamPCP Threat Actor Breaches TanStack in 'Mini Shai-Hulud' Supply Chain Campaign

💸 Financially motivated group TeamPCP compromises popular TanStack library in 'Mini Shai-Hulud' supply chain campaign. The attack on npm/PyPI ecosystems uses malicious packages to steal developer credentials. #SupplyChain #TeamPCP #TanStack #npm

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/teampcp-mini-shai-hulud-campaign-breaches-tanstack-in-widespread-supply-chai…

The New Oil May 22

#GitHub links repo breach to #TanStack #npm supply-chain attack

https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/

#cybersecurity #DataBreach #Microsoft

GitHub links repo breach to TanStack npm supply-chain attack

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

BleepingComputer

InfoQ May 22

🚨 42 npm packages - 84 malicious versions - Pushed in just 6 minutes 🚨

#TanStack just dropped a detailed postmortem on a sophisticated #SupplyChain attack exposing developers and CI/CD pipelines to credential theft and malware propagation.

🔗 Read more: https://bit.ly/4utUl7s

#InfoQ #Security #npm #DevOps