Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

Grafana Labs experienced a GitHub breach on May 11, 2026, from a TanStack npm supply chain attack by TeamPCP.

• •The breach was limited to Grafana Labs' GitHub environment, exposing source code and internal repositories with business contact information
• •Attackers accessed GitHub repositories after a missed token rotation during initial response
• •Grafana refused an extortion demand on May 16, citing no guarantee data would be deleted
• •The company implemented enhanced security: token rotation, monitoring, commit audits, and improved GitHub security

This summary was automatically generated by AI based on the original article and may not be fully accurate.