Post-incident review for TanStack npm supply chain ransom incident: No unauthorized access to customer production systems

Following a supply chain ransom incident where attackers used a leaked credential to clone private GitHub repositories, Grafana Labs confirmed that no customer production systems or the Grafana Cloud platform were compromised and no code was altered. The company refused to pay the ransom and has since implemented extensive security hardening measures, supported by an independent audit conducted alongside Mandiant.