TanStack npm Attack Led to Theft of Private CrowdSec GitHub Repositories

An attacker stole approximately 170 private GitHub repositories belonging to CrowdSec following a credential theft incident tied to the May supply-chain attack on TanStack npm packages. The breach occurred because access credentials belonging to a departed employee, whose workstation was compromised, were left active.