Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.

Read at the source

Summary written for cymesh.dev. The full article lives at Dark Reading.

Topics

supply-chain

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/shai-hulud-attack-nips-cyber-firm-crowdsec-s-github-data-tpssgr

2026-09-29 13:45 UTC[info]

101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent

The Hacker Newssupply-chain

2026-09-24 11:08 UTC[info]

Malicious npm Packages That Evade Defenses

Schneier on Securitysupply-chain malware apt

2026-09-23 20:53 UTC[info]

GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks

Dark Readingsupply-chain

2026-09-21 10:55 UTC[info]

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

SecurityWeeksupply-chain data-breach

2026-09-20 14:11 UTC[info]

Malicious npm packages evade install-script defenses at runtime

BleepingComputersupply-chain malware

2026-09-20 11:07 UTC[info]

An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Ars Technicasupply-chain