CrowdSec discloses copy of about 170 private GitHub repositories linked to TanStack npm supply chain attack

55/100

CrowdSec said an attacker copied about 170 private GitHub repositories on May 22 using a departed employee's account whose access had not been revoked; the employee's laptop was compromised in the TanStack npm supply chain attack. Organisations should revoke access promptly on offboarding and rotate credentials exposed to the compromised packages.