Grafana Labs

Reported Context (3)

Grafana Labs disclosed that a targeted attack tied to the Mini Shai-Hulud npm worm and a poisoned TanStack package led to source code theft and a ransom demand, but its production environments and Grafana Cloud Grafana Labs Reports Source Code Theft in Mini Shai-Hulud npm Worm Attack
Grafana Labs confirmed that hackers breached its GitHub environment using a stolen token and downloaded the company’s codebase, but said no customer data or personal information was accessed. Grafana Labs Confirms GitHub Breach, Refuses Ransom Demand
Grafana Labs said hackers downloaded its source code after compromising its GitHub environment with a stolen access token, but no customer data or personal information was exposed. Grafana Says Stolen GitHub Token Enabled Source Code Theft

Malware (2)

People (1)

Threat Actors (4)

MITRE ATT&CK (1)

Products (4)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.