The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following the TanStack npm supply-chain attack last week. [...]
Grafana breach caused by missed token rotation after TanStack attack
Summary + source link. No paywalls, no tracking.