> TritonInfoSec News
Home / Sep 20, 2026 / Story
0
#8 The Hacker News general September 19, 2026 at 07:14 UTC

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

By [email protected] (The Hacker News)

AI Summary

CrowdSec disclosed on September 18 that an attacker copied approximately 170 private GitHub repositories on May 22 by leveraging the still-active GitHub account of a recently departed employee whose laptop was compromised in the TanStack npm supply chain attack — in which malicious npm package versions stole developer credentials. The incident illustrates compounding risk from supply chain attacks combined with inadequate offboarding procedures.

Read full article → https://thehackernews.com/2026/09/crowdsec-says-ta…

Relevance score: 80.0/100

# More from September 20

  1. 1
    ShinyHunters hacks Clop leak site, threatens to extort ransomware gang BleepingComputer
  2. 2
    North Korean WaterPlum hackers infected 30,000 devices worldwide BleepingComputer
  3. 3
    Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild The Hacker News
  4. 4
    Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws The Hacker News
  5. 5
    Cisco Zero-Day Highlights API Endpoint Authentication Issues Dark Reading
  6. 6
    CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild The Hacker News
  7. 7
    SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE The Hacker News
  8. 9
    Gyazo server flaw exploited to steal 23.6 million user records BleepingComputer
  9. 10
    Early Scattered Spider member pleads guilty to cybercrime spree CyberScoop