Grafana Labs security update: Latest on TanStack npm supply chain ransomware incident (opens in new tab)

Covers TanStack npm Packages Hit by Mini Shai-HuludCovered by 12 sources including BleepingComputer, SecurityWeekDiscussed on Hacker News and Lobsters

Grafana Labs confirmed a targeted attack by a cybercrime group that gained unauthorized access to our GitHub repositories and downloaded our codebase. Here is the latest update about our investigations.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 12 articles

BleepingComputer·

Grafana breach caused by missed token rotation after TanStack attack

SecurityWeek·

Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack

Help Net Security·

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

View all 12 ›