Back to all news
Security

Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Dark Reading·September 22, 2026·1 min read
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Threat actors stole 170 private repositories from cyber-firm CrowdSec using an OAuth token stolen from a former employee's computer via the TanStack npm supply chain attack. The breach, dubbed Shai-Hulud, exposed sensitive data, and CrowdSec is investigating the extent of the compromise.

Read at Dark Reading
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store