Open AI Hacked via TanStack Supply Chain Vulnerability

Post Views: 4

OpenAI Discloses Impact of TanStack Supply Chain Attack

In a recent disclosure, OpenAI revealed the extent of the TanStack supply chain attack that occurred on May 11.

The Breach:

The open-source web application development stack TanStack was compromised when the TeamPCP hacking group exploited vulnerabilities in the package publishing process, releasing 84 malicious artifacts across 42 packages.

Over 170 packages across several high-profile NPM and PyPI namespaces were compromised, including those used by OpenAI.
Two employee devices at OpenAI were infected with the Shai-Hulud worm, allowing the attackers to exfiltrate credentials and other sensitive information from internal source code repositories.

However, OpenAI emphasized that only limited credential material was successfully stolen, and no customer data or intellectual property was impacted.

Response:

The company took swift action to mitigate the breach:

Rotating credentials across all affected repositories.
Revoking user sessions.
Temporarily restricting code-deployment workflows.

Additionally, OpenAI decided to revoke code-signing certificates for iOS, macOS, Windows, and Android products and resign all affected applications.

According to OpenAI, “Users running macOS will need to update their applications by June 12, 2026, to ensure continued functionality.”

OpenAI is working closely with platform providers to prevent further notarizations and has reviewed all notarizations of software using its previous certificates to confirm no unauthorized modifications have occurred.

The company concluded that “t