TanStack Router SSR Query Core
npm@tanstack/router-ssr-query-coreTanStack Router SSR Query Core is the framework-agnostic implementation of the SSR Query integration, used by the React and Solid adapters. It manages the serialization protocol for transferring server-fetched data to the client.
Checking TanStack Router SSR Query Core
@tanstack/router-ssr-query-core 1.56.0 is a clean, monitored version with no known supply chain compromise. The example response returns supply_chain_monitored: true and compromised: false with an empty sources array.
curl "https://api.attestd.io/v1/check?product=%40tanstack%2Frouter-ssr-query-core&version=1.56.0" \
-H "Authorization: Bearer YOUR_API_KEY"{
"product": "@tanstack/router-ssr-query-core",
"version": "1.56.0",
"supported": true,
"risk_state": "none",
"risk_factors": [],
"actively_exploited": false,
"remote_exploitable": false,
"authentication_required": false,
"patch_available": false,
"fixed_version": null,
"confidence": 0.9,
"cve_ids": [],
"cves": null,
"max_epss": null,
"typosquat": null,
"supply_chain_monitored": true,
"supply_chain": {
"compromised": false,
"sources": [],
"malware_type": null,
"description": null,
"advisory_url": null,
"compromised_at": null,
"removed_at": null
},
"last_updated": "2026-05-01T00:00:00Z"
}Why this package is monitored
This package serializes SSR query results for client hydration across React and Solid adapters. Tampering can inject or strip dehydrated state before the browser trusts it.
Attestd monitors @tanstack/router-ssr-query-core using the following detection sources:
registryManually curated advisories in the Attestd registry, verified by a human analyst. Confidence 1.0.
osvOSV.dev malicious-package advisories with IDs prefixed MAL-. Confidence 0.95.
npm_deprecationnpm package versions with deprecation messages containing targeted attack language such as malicious, backdoor, or compromised. Confidence 0.80.