conv.

← The whole story
Security
CrowdSec discloses source-code leak traced to TanStack npm supply-chain attack

Security community praises CrowdSec's transparency

2 Sep 20 7:42 AM · 3d ago · 4 posts · 2 sources · development 2 of 2

Security practitioners circulate CrowdSec's post-mortem, commending its level of detail and candor compared with typical breach disclosures.

Security community praises CrowdSec's transparency
thehackernews.com

“Really wish every cybersecurity outfit (and every org for that matter) was as forthcoming and detailed (and competent) as Philippe and team.”

hrbrmstr

CrowdSec French cybersecurity companyCrowdSec CEO Author of the company's post-mortem blog postTanStack Open-source npm package maintainerMistral AI Company also affected by the TanStack attackOpenAI Company also affected by the TanStack attack

The whole story posts the bright band is this development · numbered dots are the others · click one to jump

Peak 1 piece in two hours at Sep 19, 2 AM; 9 pieces over 5 days (3 articles · 6 posts) Sep 19, 2 AM — 1 piece · 1 post — Mastodon 1Sep 19, 4 AM — quietSep 19, 6 AM — 1 piece · 1 post — Mastodon 1Sep 19, 8 AM — quietSep 19, 10 AM — quietSep 19, 12 PM — quietSep 19, 2 PM — quietSep 19, 4 PM — quietSep 19, 6 PM — quietSep 19, 8 PM — 1 piece · 1 post — Hacker News 1Sep 19, 10 PM — quietSep 20, 12 AM — quietSep 20, 2 AM — quietSep 20, 4 AM — 1 piece · 1 post — Mastodon 1Sep 20, 6 AM — 1 piece · 1 post — Mastodon 1Sep 20, 8 AM — quietSep 20, 10 AM — quietSep 20, 12 PM — quietSep 20, 2 PM — quietSep 20, 4 PM — quietSep 20, 6 PM — 1 piece · 1 article — Mastodon 1Sep 20, 8 PM — quietSep 20, 10 PM — quietSep 21, 12 AM — quietSep 21, 2 AM — quietSep 21, 4 AM — 1 piece · 1 article — Newswires 1Sep 21, 6 AM — quietSep 21, 8 AM — quietSep 21, 10 AM — quietSep 21, 12 PM — quietSep 21, 2 PM — 1 piece · 1 post — Mastodon 1Sep 21, 4 PM — quietSep 21, 6 PM — quietSep 21, 8 PM — quietSep 21, 10 PM — quietSep 22, 12 AM — quietSep 22, 2 AM — quietSep 22, 4 AM — quietSep 22, 6 AM — quietSep 22, 8 AM — quietSep 22, 10 AM — quietSep 22, 12 PM — 1 piece · 1 article — Newswires 1Sep 22, 2 PM — quietSep 22, 4 PM — quietSep 22, 6 PM — quietSep 22, 8 PM — quietSep 22, 10 PM — quietYesterday, 12 AM — quietYesterday, 2 AM — quietYesterday, 4 AM — quietYesterday, 6 AM — quietYesterday, 8 AM — quietYesterday, 10 AM — quietYesterday, 12 PM — quietYesterday, 2 PM — quietYesterday, 4 PM — quietYesterday, 6 PM — quietYesterday, 8 PM — quietYesterday, 10 PM — quietToday, 12 AM — quiet ◂ 1 earlier2
2Security community praises CrowdSec's…
Sep 20Sep 21Sep 22yesterdaynow · 2:57 AM ET

Reported in the same hours no headline names this development itself — these 3 claims were published in its stretch

  1. 1 outlet Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data

    first by Dark Reading, 1d ago

  2. 1 outlet CrowdSec Confirms Source Code Stolen in Supply Chain Attack

    first by SecurityWeek, 2d ago

  3. 1 outlet CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

    first by Mastodon, 3d ago

What people said 3 voices · verbatim

All 2 developments of CrowdSec discloses source-code leak traced to TanStack npm… →

MastodonHacker NewsNewswires