Our response to the TanStack npm supply chain attack

Summary

OpenAI reports that two employee devices were affected by the Mini Shai-Hulud attack, which used a compromised TanStack npm package. The company says the activity led to limited credential exfiltration from a subset of internal source code repositories, and it found no evidence of customer data access, intellectual property compromise, or altered software.

Mitigation

OpenAI says it isolated impacted systems and identities, revoked user sessions, rotated all credentials across impacted repositories, and temporarily restricted code-deployment workflows. It is rotating code-signing certificates as a precaution, is stopping new notarizations with the previous certificates, and will fully revoke the certificate on June 12, 2026, after which macOS will block new downloads and launches of apps signed with it. macOS users will need to update their applications. The company also cites package manager configurations with minimumReleaseAge and additional provenance validation tools as controls it deployed, noting the two affected devices lacked them.

Topics

• Model and package supply chain

Related items

• InfoResearchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six DaysSame vendor · The Hacker News
• InfoNvidia, worth $5.5tn, donates $250m to UK for AI safety researchSame vendor · The Guardian Technology
• MediumAI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.Same vendor · CSO Online
• LowOpenAI’s AI misalignment problem is growingSame vendor · CSO Online
• InfoOpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference RoomSame vendor · The Hacker News