CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, in which malicious versions of TanStack's npm packages stole credentials from
Se muestra el contenido original; la traduccion localizada aun no esta disponible.
Qué ocurrió
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, in which malicious versions of TanStack's npm packages stole credentials from
Por que importa
The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.
Entidades afectadas
Ver evidencia
1 articulos · 1 informe original · 1 independientes
- The Hacker NewsFuente primaria · Respalda · EN · 100%CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories ↗
Afirmaciones
- CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories Observado
Conflictos
No se detectaron conflictos importantes en la evidencia disponible.
Cronología
- Primera publicación
Movimiento del mercado posterior al evento
La reacción del mercado aún no está disponible para este activo y periodo.