← Back to feed
Threat Actors & CampaignsEmerging1 sourceSep 22, 2026 · 17:32via Dark Reading

Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Brief

Threat actors stole 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.

Read more on Dark Reading→