CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec disclosed that about 170 private GitHub repositories were copied on May 22 after a former employee's laptop was compromised by malicious TanStack npm package versions (CVE-2026-45321) that stole developer credentials; the leak included source code, 83 user emails, and 51 investor records, though CrowdSec says its infrastructure and databases were not accessed and most exposed credentials were unusable or rotated.