OpenAI Hit by TanStack npm Supply-Chain Attack After Malicious Packages Compromised Devices

OpenAI said two employee devices were compromised after a malicious @tanstack/* npm package was installed during the broader Mini Shai-Hulud supply-chain campaign. The intrusion led to theft of a limited amount of internal credential material from repositories accessible to the affected employees, but the company said it found no evidence that customer data, production systems, deployed software, intellectual property, or production code were compromised or altered. OpenAI isolated the affected systems, revoked sessions, rotated credentials, restricted code-deployment workflows, and brought in a third-party incident response firm.

The incident is tied to a wider attack on the npm ecosystem in which attackers allegedly abused TanStack’s GitHub Actions and CI/CD release pipeline to publish 84 malicious versions across 42 @tanstack/* packages, stealing developer and cloud credentials. OpenAI is rotating signing certificates for several desktop products, including macOS apps, and warned users to update before June 12 because older certificates will be blocked from new notarizations. The campaign follows other identity-driven npm compromises, including the trojanized axios releases 1.14.1 and 0.30.4, underscoring how stolen maintainer or publisher credentials can turn trusted software channels into malware delivery paths.