GitHub links repo breach to TanStack npm supply-chain attack

Multiple high-impact security incidents and vulnerabilities reported: a TanStack npm supply-chain compromise (malicious Nx Console VS Code extension) led to breaches of thousands of GitHub internal repositories (≈3,800 reported) and contributed to a Grafana data breach after a missed GitHub workflow token rotation; TeamPCP claimed access to ~4,000 repos. Separately, SonicWall Gen6 SSL‑VPN appliances were abused—threat actors brute-forced credentials and bypassed MFA on incompletely patched devices to deploy ransomware tools. A max-severity RCE was disclosed in ChromaDB (Python/FastAPI), Drupal