Grafana Labs Says Code Breach Stemmed from TanStack Attack
2026-05-21T08:52:18Z•596d207ba18f3808d2ffd5da311e38d4c1098a9c370b2903e8fa48f17801043e
What happened
A cluster of high-impact supply‑chain and software security incidents dominate the feed: TanStack-related npm compromise (Mini Shai‑Hulud) has been linked to downstream outages including Grafana Labs code theft after a GitHub compromise reportedly involving a malicious VS Code extension (threat actor TeamPCP). Multiple large-scale supply‑chain and open‑source attacks (npm/PyPI, Hugging Face typosquat) and dev-targeting malware (fake Claude installer, PowerShell stealer) were reported. Critical infrastructure vulnerabilities and active zero‑days are highlighted — a severe Exchange Server zero‑0
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- infosecurity_magazine
- Record identifier
- 596d207ba18f3808d2ffd5da311e38d4c1098a9c370b2903e8fa48f17801043e
- Enrichment time
- 2026-05-21T08:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.