Story thread · 2 reports / 2 sources

TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen

devops.com · 3hShare

CrowdSec says attackers stole source code from about 170 private GitHub repositories after a TanStack npm supply chain attack exposed an OAuth token tied to a former employee.

First report: Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data — darkreading.com, 1d