Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain attack on TanStack, in which malicious versions of TanStack's npm packages stole credentials from
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CA

Carlos

11h ago
2 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

alex_but_tired91

alex but tired

alex but tiredUpvoted 5h ago0 comments · 93 shares
KH

Lars Khan

Lars KhanUpvoted 9h ago2 comments · 48 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
BragJack attacks hijack AI browser agents through malicious ext…

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in…
alex but tired

alex but tired

1h ago
0
thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Lea…

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited…
Thanakorn Boon

Thanakorn Boon

2h ago
0
thehackernews.com
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Account…

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of sev…
Rosa Martinez

Rosa Martinez

7h ago
0
thehackernews.com
Public Exploits Released for Four Linux Kernel Flaws That Enabl…

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a mach…
TN

The Hacker News

18h ago
0
darkreading.com
Vectra AI Launches Ascent to Help Address New Era of AI-Driven …

The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI exper…
DR

Dark Reading

21h ago
0
schneier.com
Friday Squid Blogging: On Squid Egg Sacs

Short essay about squid egg sacs. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog…
SS

Schneier on Security

21h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Lea…

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited…
Thanakorn Boon

Thanakorn Boon

2h ago
0
thehackernews.com
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Account…

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of sev…
Rosa Martinez

Rosa Martinez

7h ago
0
thehackernews.com
Public Exploits Released for Four Linux Kernel Flaws That Enabl…

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a mach…
TN

The Hacker News

18h ago
0
thehackernews.com
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven…

A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven v…
Nirano

Nirano

1d ago
0
thehackernews.com
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Ma…

Every release of the Unbound DNS resolver before 1. 26. 1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory&…
TN

The Hacker News

2d ago
0
thehackernews.com
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticat…

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitatio…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest