Grafana breach caused by missed token rotation after TanStack attack
Grafana Labs disclosed a data breach from an unrotated GitHub token after the TanStack npm attack, exposing internal repositories and business contacts but no customer systems.
Tag
Supply Chain Attack
Stories with this tag. Sections and all tags live in the Topics menu; for full-text use search.
-
-
OpenAI confirms breach tied to TanStack supply chain attack
OpenAI confirms two employee devices breached in the Mini Shai-Hulud supply-chain campaign; code-signing certs exposed, macOS users must update by June 12, 2026.
-
Bitwarden CLI npm package compromised to steal developer credentials
Bitwarden CLI npm package compromised, exposing developer secrets; users must rotate credentials.
-
Backdoors Found in Dozens of WordPress Plugins Affecting Thousands of Websites
Malicious backdoors discovered in popular WordPress plugins affect 20,000+ websites, highlighting supply chain security risks.
-
OpenAI rotates macOS certs after Axios attack hit code-signing workflow
OpenAI rotates macOS certificates after compromised Axios package in GitHub Actions workflow; users must update apps by May 8, 2026.
