Popular code generator for TanStack Query hit by supply chain worm

A popular npm package used for TanStack Query code generation was compromised via a GitHub Actions workflow vulnerability, unleashing a sophisticated worm that steals developer and cloud credentials, propagates itself across multiple ecosystems, and exfiltrates sensitive data to attacker-controlled GitHub repositories.