Shai-Hulud Supply Chain Attack Hits CrowdSec's GitHub Data via TanStack npm Compromise

Threat actors stole 170 private GitHub repositories belonging to cybersecurity firm CrowdSec using an OAuth token taken from a former employee’s computer.

The token was obtained through the TanStack npm supply chain attack, part of the broader Shai-Hulud campaign. Organizations should audit and revoke OAuth tokens tied to former employees, especially those with GitHub scopes.