AI Digest — May 12, 2026
What happened in AI today and why it matters for your business.
Another week, another supply chain attack. Plus Google confirms what we all suspected about AI-powered hacking.
TanStack Got Compromised Through npm
The popular React Query library (TanStack) published a detailed postmortem after hackers compromised their npm packages. They got in through a maintainer’s account and pushed malicious code to production packages.
The attack worked because modern JavaScript development relies on thousands of dependencies. One compromised package can infect entire applications. TanStack caught it quickly, but not before the malicious version was downloaded thousands of times.