Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

GitHub

Disclosed May 20, 2026Confirmed

Official notice

GitHub says 3,800 internal repositories stolen via poisoned Nx Console extension

GitHub said attackers accessed about 3,800 internal repositories after an employee installed a malicious Nx Console VS Code extension version tied to the TanStack npm supply-chain attack. TeamPCP demanded a ransom; GitHub found no evidence customer data outside those repos was stolen.

What is known

People affectedNot stated in the sources we have
DisclosedMay 20, 2026
AttackSupply chain
Data exposedSource codeCredentials and tokensAPI keys
SectorTech · US
StatusConfirmed
Part ofTanstack (2026)

Sources

Official noticegithub.blog
Investigating unauthorized access to GitHub's internal repositories
Newstechcrunch.com
GitHub says hackers stole data from thousands of internal repositories
Newsbleepingcomputer.com
GitHub links repo breach to TanStack npm supply-chain attack

Notices filed

TotalMay 20
ResearchCount not stated

Same campaign

Grafana LabsSupply chain exposed source code.Supply chainTechUSUnverifiedMay 16OpenAITanStack npm supply chain attack reached two OpenAI employee devices and internal reposSupply chainAIUSUnverifiedMay 14Mistral AITeamPCP offers Mistral AI code repos for sale after TanStack compromiseSupply chainAIFRMay 14
History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about GitHub