Supply Chain Attacks + Stale Credentials: Why This Combination Is So Dangerous in 2026 (opens in new tab)

Recent incidents at GitHub and Grafana Labs highlight a painful truth in modern infrastructure: even strong perimeter defenses can fail completely when credential management is neglected. What Happened ? A supply chain attack through compromised TanStack npm packages led to the breach of over 3,800 internal GitHub repositories via a malicious VS Code extension. Shortly after, Grafana Labs disclosed that attackers stole their source code because a single GitHub token was missed during emergenc...