Tracked topic
Grafana breach caused by missed token rotation after TanStack attack By Bill Toulas May 20, 2026 11:46 AM The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week. …
… According to TanStack's post-mortem, the attackers abused weaknesses in the project's GitHub Actions workflows and CI/CD configuration to execute malicious code, extract tokens from memory, and publish malicious packages through TanStack's normal release pipeline. …
… According to TanStack's post-mortem report from TanStack, the attackers chained three vulnerabilities: a risky ‘pull request-target’ workflow, GitHub Actions cache poisoning, and OIDC token theft from runner memory. …
GitHub links repo breach to TanStack npm supply-chain attack By Sergiu Gatlan May 21, 2026 02:54 AM GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack… …