CrowdSec confirmed a source code leak from May 2026 involving its private GitHub repositories, including SaaS console and AWS routines, discovered in September. No client data or credentials were compromised; the leak likely resulted from a backdoored Tanstack component that extracted an API key, and CrowdSec has rotated all affected tokens.