Mantine-datatable (and Other Repositories) Compromised – Owner Account Suspended

A security threat was detected involving unauthorized commits made via GitHub Actions across 5 GitHub repositories, including Mantine-datatable.

The malicious commits were designed to tamper with the configuration files of AI coding assistants and development environments such as Claude Code, Gemini, Cursor, and VS Code, causing them to execute a payload runner (node .github/setup.js).

Key target files:

• .claude/settings.json (auto-executed when a Claude Code session starts)
• .gemini/settings.json (auto-executed when a Gemini session starts)
• .cursor/rules/setup.mdc (auto-executed when the repository is opened in Cursor)
• .vscode/tasks.json (when running a VS Code task)
• package.json (hijacks the npm test script)

If you have recently cloned or updated the affected repository, you should avoid opening it with VS Code, Cursor, or any AI coding assistant, or running npm test, until the owner regains control and reverts the malicious commits.

The currently published npm package is safe, and this attack is limited to users working directly from a clone of the source repository.