Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
are-you-get-tanstack-attack — Are you get Tanstack Supply chain attack attack of 5/11? CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx | Kitploit
Tools/GitHubGitHub/yomisana/are-you-get-tanstack-attack
Static AnalysisVulnerability ScannersCode AnalysisSupply Chain Security
GitHubyomisana/are-you-get-tanstack-attack

are-you-get-tanstack-attack

Are you get Tanstack Supply chain attack attack of 5/11? CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx

View Repository

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
24 months agoNot yet reviewed
Share

TanStack Router CVE Scanner

A security scanning tool to detect the TanStack Router CVE | TanStack Router GHSA in your projects.

Overview

This tool scans your codebase for indicators of the TanStack Router vulnerability (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx), which affects specific versions of TanStack Router packages. It detects:

  • router_init.js files that may contain malicious code
  • Suspicious optional dependencies in package.json
  • Known vulnerable package versions
  • Vulnerable versions in lock files (package-lock.json, pnpm-lock.yaml, yarn.lock)
  • Related entries in npm logs

Known Vulnerable Versions

The following package versions are flagged as vulnerable:

PackageVulnerable Versions
@tanstack/react-router1.169.5, 1.169.8
@tanstack/react-start1.167.68, 1.167.71
@tanstack/router-core1.169.5, 1.169.8
@tanstack/router-devtools-core1.167.6, 1.167.9
@tanstack/react-router-devtools1.166.16, 1.166.19
@tanstack/router-plugin1.167.38, 1.167.41
@tanstack/router-vite-plugin1.166.53, 1.166.56
@tanstack/router-cli1.166.46, 1.166.49
@tanstack/router-generator1.166.45, 1.166.48
@tanstack/virtual-file-routes1.161.10, 1.161.13
@tanstack/history1.161.9, 1.161.12

Risk Levels

  • HIGH: Found router_init.js, suspicious optional dependencies, or vulnerable versions in package.json/lock files
  • MEDIUM: Found related entries in npm logs only
  • LOW: No indicators found

Installation

macOS

  1. Open Terminal
  2. Navigate to your project directory:
    root@kitploit:~
    cd /path/to/your/project
  3. Run the scanner (see Usage below)

Windows

  1. Open Command Prompt or PowerShell
  2. Navigate to your project directory:
    root@kitploit:~
    cd C:\path\to\your\project
  3. Run the scanner (see Usage below)

Linux

  1. Open Terminal
  2. Navigate to your project directory:
    root@kitploit:~
    cd /path/to/your/project
  3. Run the scanner (see Usage below)

Usage

Basic Usage

Scan current directory:

root@kitploit:~
node scan.js

Scan specific folder:

root@kitploit:~
node scan.js /path/to/your/project

Scan home directory:

root@kitploit:~
node scan.js ~

Save Output to JSON File

macOS / Linux:

root@kitploit:~
node scan.js ~/your-project > scan-result.json

Windows (Command Prompt):

root@kitploit:~
node scan.js C:\Users\YourName\your-project > scan-result.json

Windows (PowerShell):

root@kitploit:~
node scan.js C:\Users\YourName\your-project | Out-File -FilePath scan-result.json

Example Workflows

Scan a single project:

root@kitploit:~
cd /Users/username/my-react-app
node scan.js . > result.json
cat result.json

Scan entire system (macOS/Linux):

root@kitploit:~
node scan.js ~ > full-scan.json

Scan with jq (macOS/Linux) - filter just the risk level:

root@kitploit:~
node scan.js . | jq -r '.risk'

Output Format

The scanner outputs JSON with the following structure:

root@kitploit:~
{
  "scannedRoot": "/path/to/scanned/directory",
  "risk": "HIGH|MEDIUM|LOW",
  "summary": {
    "routerInit": 0,
    "optionalDeps": 0,
    "badPackageVersions": 0,
    "badLockVersions": 0,
    "npmLogs": 0,
    "errors": 0
  },
  "findings": {
    "routerInit": [],
    "optionalDeps": [],
    "badPackageVersions": [],
    "badLockVersions": [],
    "npmLogs": [],
    "errors": []
  }
}

Skipped Directories

The scanner automatically skips the following directories to improve performance:

  • .git
  • .next
  • .nuxt
  • .turbo
  • .cache
  • .DS_Store
  • dist
  • build
  • coverage
  • .yarn

Files larger than 5MB are also skipped.

What to Do If Vulnerable

If the scanner reports HIGH risk:

  1. Immediately check the affected package.json files
  2. Update vulnerable packages to the latest safe versions
  3. Remove any suspicious router_init.js files
  4. Clean install dependencies:
    root@kitploit:~
    rm -rf node_modules package-lock.json
npm install
  5. Review your lock files for any malicious configurations
  6. Report the vulnerability if you found evidence of exploitation

Additional Resources

  • TanStack Router GitHub
  • NVD CVE-2026-45321
  • Security Advisory
Download Tool