CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left. The French security company kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, where malicious npm packages stole credentials.