Product
Grafana Cloud
- First Reported
- May 20, 2026
- Latest Reported
- May 28, 2026
Reported Context (2)
- TanStack package led to source code theft and a ransom demand, but its production environments and Grafana Cloud infrastructure were not affected. Grafana Labs Reports Source Code Theft in Mini Shai-Hulud npm Worm Attack
- Grafana Labs said its May 19, 2026 investigation found no evidence that customer production systems or Grafana Cloud operations were compromised, with the incident limited to its GitHub environment. Grafana Says TanStack-Linked Breach Hit GitHub Environment, With No Evidence of Production Compromise
Malware (1)
Threat Actors (2)
MITRE ATT&CK (1)
Vendors (1)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.