CrowdSec says TanStack attack exposed private code repositories

CrowdSec said September 18 that an attacker copied about 170 private GitHub repositories using the account of a recently departed employee whose laptop was compromised in May's TanStack npm supply-chain attack. The company said the copied archive later appeared online and included 83 user email addresses plus information on 51 potential investors. CrowdSec said its infrastructure and databases were not accessed and no code was changed. It said exposed credentials were rotated on September 16 and 17.