
PaperPhone Headless Browser Network Uses 75,000 IPs and Fabricated Mobile Identities Across 43 Countries
CrowdSec says the PaperPhone headless-browser network scraped the web from 75,000 IPs across 43 countries.
8 stories, newest first · one card per story

CrowdSec says the PaperPhone headless-browser network scraped the web from 75,000 IPs across 43 countries.

CrowdSec says the PaperPhone scraper used 75,000 IPs in 43 countries to impersonate mobile users.

Attackers stole 170 CrowdSec private GitHub repositories using an OAuth token taken in the TanStack npm supply-chain attack.

CrowdSec confirmed attackers stole source code from roughly 300 GitHub repositories via the May 2026 TanStack supply chain attack; no customer data affected.

CrowdSec says TeamPCP cloned about 170 repositories using a GitHub token stolen in the TanStack npm compromise.

Attackers used an OAuth token stolen in the TanStack npm supply chain attack to clone 170 private CrowdSec GitHub repositories, later leaked on a forum.

CrowdSec says the TanStack npm supply chain attack let an attacker copy 170 private GitHub repos via a former employee's retained account.

CrowdSec 1.8.0 adds WAF bot detection via challenges and fingerprinting and fixes denial-of-service flaws in HTTP and Kubernetes audit datasources.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views