CrowdSec traces repository theft to TanStack compromise
CrowdSec has said a supply-chain attack involving compromised TanStack npm packages led to the unauthorised copying of about 170 private GitHub repositories after credentials linked to a departing employee were exposed. The cybersecurity company said its investigation, completed with assistance from GitHub, traced the breach to an OAuth token obtained after the employee’s account was compromised in the May TanStack attack. The repositories were downloaded on May […]
