Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
Summary + source link. No paywalls, no tracking.