CYBERSECURITYTRACKER
Permanent story citation

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 8001

As cited

Copy frozen at (site build).

breaches incidents

CrowdSec Confirms Source Code Stolen in Supply Chain Attack

CrowdSec confirmed that its source code was stolen as part of the May 2026 TanStack supply chain attack. The incident affected the cybersecurity firm's development infrastructure through a compromise of upstream dependencies.

Why it matters: Organizations running CrowdSec products should assess whether the exposed code impacts their deployments and verify the integrity of any updates received after May 2026.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary