build2 publishers
A departed employee's GitHub OAuth token cloned about 170 CrowdSec repositories in nine minutes
CrowdSec's final analysis puts the entry point in a former employee's development environment, hit by the TanStack npm malware in May. Its own organisation audit logs did not keep the clone events, so GitHub Support supplied them.
Reality
- Evidence62
- Adoption32
- Hype gap−8
- Incentives72
- Confidence58