Grafana GitHub breach reveals source code leak via TanStack npm exploit

Grafana GitHub breach

Grafana Labs announced on May 19, 2026 that a breach exposed its public and private source code, yet an early assessment found ↓ 0 compromised customer production systems. The intrusion originated from a malicious TanStack npm package that temporarily granted attackers read access to the organization’s GitHub environment.

“Our investigation shows the breach was confined to our code repositories, not to client operations,” a Grafana spokesperson told Reuters.

Public repos were swiftly made private and a full security audit launched. No evidence points to data exfiltration, and Grafana is cooperating with authorities. Detailed coverage follows in Bloomberg.