Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories

Cybersecurity NewsSeptember 19, 20264 min read

CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s TanStack npm supply chain attack. The May 22 theft remained undetected until stolen source code appeared on a cybercrime forum on September 16, showing how a poisoned dependency can outlive its infection window and undermine […] The post TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories appeared first on Cyber Security News.

CrowdSec has disclosed that attackers copied about 170 private GitHub repositories after a former employee’s account was compromised through May’s TanStack npm supply chain attack. The May 22 theft remained undetected until stolen source code appeared on a cybercrime forum on September 16, showing how a poisoned dependency can outlive its infection window and undermine developer identities. The incident traces to CVE-2026-45321, the compromise of TanStack’s…

Excerpt shown under the publisher's RSS terms · 66 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article