Hackers Exploit TanStack Supply Chain Attack to Steal 170 Private CrowdSec Repositories

Threat actors linked to the TanStack npm supply chain compromise allegedly used a stolen GitHub OAuth token to clone about 170 private CrowdSec repositories, exposing source code, limited contact information, and a restricted AWS notification credential. CrowdSec stated that the compromise originated from a former employee’s account, which... Weiterlesen