Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

Threat actors carried out an attack, known as Shai-Hulud, on cybersecurity firm CrowdSec, resulting in the theft of data from the company's GitHub account. The attackers gained access using an OAuth token that was stolen from a former employee's computer. This token was obtained through a supply chain attack targeting the TanStack npm package. The breach led to the theft of 170 private repositories.