Attackers Steal 170 Private GitHub Repositories and Investor Data From CrowdSec

Cybersecurity32 days ago

A former employee's account provided a gateway for unauthorized actors to duplicate a large volume of private code libraries belonging to the security firm CrowdSec. The breach involved about 170 private GitHub repositories and exposed details on 51 potential investors and 83 user email addresses. The company discovered the May 2026 intrusion in September and linked the access to a supply chain attack on TanStack npm libraries.

The stolen material included the firm's SaaS console, connectors, and various AWS routines. CrowdSec stated the leaked code is of limited use since it primarily interacts with internal company systems. The firm's open source Security Engine was not affected, and it has since rotated all compromised tokens.

Mapped to your portfolio

Possible scenarios

35%Breach Contained Quickly0.0%
30%Code Exposure Deepens-0.2%
20%Regulatory Scrutiny Builds0.0%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.

Looking for more context or analysis?

Tilt chat provides reliable, tailored insights, alerts, and automations.

Attackers Steal 170 Private GitHub Repositories and Investor Data From CrowdSec

In this story

CrowdSec GitHub

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Portfolio

SPY
State Street SPDR S&P 500 ETF Trust
100%

Mapped to your portfolio

Possible scenarios

35%Breach Contained Quickly0.0%
30%Code Exposure Deepens-0.2%
20%Regulatory Scrutiny Builds0.0%

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.