# GitHub Repository Breach Linked to TanStack Supply Chain Attack > GitHub confirms the breach of 3,800 internal repositories via a compromised VS Code extension linked to the TanStack npm supply chain attack. - Published: 2026-05-21T09:15:44.000Z - Severity: high - Category: Supply Chain - Tags: GitHub, TanStack, NPM, Supply Chain Attack, VS Code - Author: Runtime Rebel Intel - Primary source: https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/ - Canonical: https://runtimerebel.com/blog/github-repository-breach-linked-to-tanstack-supply-chain-attack ## Key points - GitHub confirmed the breach of 3,800 internal repositories following the compromise of an employee workstation via a malicious VS Code extension dependency. - Affected systems include internal GitHub source code repositories and developer environments running the Nx Console VS Code extension. - Organizations should audit npm dependencies for malicious TanStack versions and rotate any credentials potentially exposed in local development environments. ## Incident Overview: GitHub Internal Repository Compromise GitHub has officially confirmed that it was a victim of a targeted [Supply Chain Attack](/glossary#supply-chain-attack) that resulted in the unauthorized access and cloning of approximately 3,800 internal repositories. According to [BleepingComputer](https://www.bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/), the breach was not the result of a vulnerability within the GitHub platform itself, but rather a compromise of a developer's environment through the npm ecosystem. The incident is directly linked to a broader campaign targeting the TanStack ecosystem, where attackers published malicious versions of popular packages. The primary vector for the GitHub breach was the installation of a compromised version of the Nx Console extension for Visual Studio Code. This incident highlights the growing risk of developer-focused attacks where the workstation becomes the entry point into a secure corporate environment. ## Technical Analysis: The TanStack npm Supply Chain Attack Vector The [Supply Chain Attack](/glossary#supply-chain-attack) began when threat actors gained unauthorized access to the TanStack npm organization. They leveraged this access to publish malicious versions of highly utilized packages, including `@tanstack/query-core`. These malicious versions contained obfuscated scripts designed to exfiltrate sensitive data, such as environment variables, authentication tokens, and local files, to a remote [C2](/glossary#c2) server. In the case of the GitHub breach, the Nx Console VS Code extension—a tool used for managing monorepos—included one of these compromised TanStack packages as a dependency. When a GitHub developer updated their extensions or dependencies, the malicious code executed within the context of their development environment. This allowed the attackers to harvest the developer's credentials, which were then used to perform unauthorized [Lateral Movement](/glossary#lateral-movement) into GitHub’s internal repository infrastructure. ### Analyzing the Nx Console VS Code Extension Compromise The **Nx Console VS Code extension compromise** serves as a stark reminder of the transitive trust inherent in modern software development. While the Nx team acted quickly to remediate the issue, the window of exposure was sufficient for the attackers to automate the cloning of 3,800 repositories. GitHub’s security [SOC](/glossary#soc) identified the anomalous activity, but only after a significant volume of data had been staged for exfiltration. Technically, the malicious script utilized by the attackers focused on harvesting `.env` files and system-level environment variables. These files often contain hardcoded API keys, database credentials, and personal access tokens (PATs). Once these tokens were acquired, the threat actors bypassed traditional perimeter defenses, as they possessed legitimate, albeit stolen, authentication material. ## Impact Assessment and Indicators of Compromise The scope of the **GitHub internal repository breach** is confined to source code. GitHub stated that the breached repositories did not contain customer data or production secrets that would compromise the integrity of the GitHub.com service. However, the loss of intellectual property and the potential for attackers to study the source code for [Zero-Day](/glossary#zero-day) vulnerabilities remains a significant secondary risk. Defenders should monitor for the following [IoC](/glossary#ioc) patterns and [TTP](/glossary#ttp) signals: * Unexpected outbound connections from developer workstations to unknown IP addresses or domains associated with the TanStack incident. * Unauthorized use of Personal Access Tokens (PATs) originating from non-standard IP ranges. * The presence of `@tanstack/query-core` version 5.17.20 or other compromised versions within `package-lock.json` or `node_modules`. ## Strategic Recommendations for Supply Chain Security To mitigate the risks associated with the **TanStack npm supply chain attack**, organizations must adopt a more rigorous approach to dependency management. Relying solely on [EDR](/glossary#edr) is insufficient when malicious code is executed through trusted developer tools and extensions. 1. **Dependency Pinning and Auditing**: Enforce the use of lockfiles and conduct regular audits of deep-tree dependencies. Tools like `npm audit` or specialized [Supply Chain Attack](/glossary#supply-chain-attack) detection platforms should be integrated into the CI/CD pipeline. 2. **Credential Rotation**: Immediately rotate any secrets, PATs, or environment variables that were present on developer workstations during the period of the TanStack compromise. 3. **Extension Governance**: Implement policies to restrict the installation of VS Code extensions to a pre-approved list or use Private Extension Galleries to ensure only vetted versions are deployed. 4. **Network Segmentation**: Treat developer workstations as high-risk assets. Implement strict egress filtering to prevent the exfiltration of environment variables to unauthorized external endpoints. **Related:** [GitHub Repository Breach: 3,800 Repos Accessed via VS Code Extension](/blog/github-repository-breach-3800-repos-accessed-via-vs-code-extension), [OpenAI Breach: TanStack Supply Chain Attack Impacts Employee Devices](/blog/openai-breach-tanstack-supply-chain-attack-impacts-employee-devices) --- AI-generated analysis from the primary source above; not human-reviewed before publication — verify anything operational against the original (https://runtimerebel.com/editorial). Quote with attribution and a link to the canonical URL: https://runtimerebel.com/blog/github-repository-breach-linked-to-tanstack-supply-chain-attack