TanStack npm supply chain attack fuels CrowdSec breach of 170 private repos
The TanStack npm supply chain attack harvested a GitHub token that allowed an ex-employee to copy 170 private CrowdSec repositories, exposing code.
npm
2 stories
npm supply chain attack RedC2 Deploys AI-Powered Linux Backdoor
Trend Micro researchers detail an npm supply chain attack RedC2 that drops an AI‑enabled Linux backdoor, exposing Node.js ecosystems to advanced command‑and‑con