TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...