AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

Model and package supply chain

Risks in the models, weights, datasets and packages that AI systems are built from, including malicious uploads and unsafe file formats.

RSS JSON

All items: 84
Last 90 days: 16
Change: -57%vs 37 before

Items per month

Model and package supply chain, items per month
Month	Items
May 2025	0
Jun 2025	0
Jul 2025	1
Aug 2025	0
Sep 2025	0
Oct 2025	0
Nov 2025	0
Dec 2025	2
Jan 2026	1
Feb 2026	8
Mar 2026	13
Apr 2026	5
May 2026	18
Jun 2026	10
Jul 2026	8
Aug 2026	5
Sep 2026	6
Oct 2026	1

1 items

Our response to the TanStack npm supply chain attack
May 12, 2026
LowIncidentSecurityIndustry
OpenAI reports that two employee devices were affected by the Mini Shai-Hulud attack, which used a compromised TanStack npm package. The company says the activity led to limited credential exfiltration from a subset of internal source code repositories, and it found no evidence of customer data access, intellectual property compromise, or altered software.
Fix: OpenAI says it isolated impacted systems and identities, revoked user sessions, rotated all credentials across impacted repositories, and temporarily restricted code-deployment workflows. It is rotating code-signing certificates as a precaution, is stopping new notarizations with the previous certificates, and will fully revoke the certificate on June 12, 2026, after which macOS will block new downloads and launches of apps signed with it. macOS users will need to update their applications. The company also cites package manager configurations with minimumReleaseAge and additional provenance validation tools as controls it deployed, noting the two affected devices lacked them.
OpenAI Blog

Topic added 2026-10-09. An item belongs to this topic when its title matches one of the topic's patterns or its summary mentions the topic at least twice. Report a wrong match with the feedback button on the item.

Items per month

Our response to the TanStack npm supply chain attack