CrowdSec Source Code Leak

CrowdSec's private source code was leaked in May 2026 through a compromised Tanstack component, affecting repositories containing code for their SaaS console, AWS routines, and connectors. The company confirmed no client data, credentials, or personally identifiable information was exposed, and the impact is limited to CrowdSec itself since the leaked code cannot function outside their ecosystem. The company has rotated all tokens and credentials and will monitor for any abnormal activity.