CrowdSec

CrowdSec's source code, roughly 300 repositories, 170 of them private, sat exposed after the May 2026 TanStack supply chain attack. Most likely culprit? A single compromised API key. That one key reached across the SaaS console, AWS operations, connectors, and automation scripts: one credential, one blast radius. CrowdSec states confidently that the source code can't be used to cause harm because it can't be used outside of its context. Not finding the leak of the source code for several months does make those reassurances seem a bit bold, given the circumstances.