Grafana confirms TanStack npm breach didn’t touch customer data
Grafana Labs disclosed that the May 11 TanStack npm supply‑chain ransom attack was confined to its internal GitHub repos; no code was altered and no customer production systems or Grafana Cloud services were accessed. An independent Mandiant audit corroborated the findings, so users need take no action.