OpenAI Confirms Security Breach Via TanStack npm Supply Chain Attack

Cybersecuritynews •Guru Baran • May 15, 2026

Two employee devices at OpenAI were compromised in a sweeping software supply chain attack targeting TanStack npm, but the AI company confirmed no user data, production systems, or intellectual property were affected. On May 11, 2026 UTC, threat actors launched a campaign dubbed “Mini Shai-Hulud” a coordinated supply chain offensive orchestrated by the TeamPCP extortion […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

OpenAI Faces Supply Chain Attack via TanStack npm Library OpenAI confirmed a security breach affecting two employee devices due to a supply chain attack linked to the TanStack npm library, part of a broader campaign called Mini Shai-Hulud. The attack involved the publication of 84 malicious package versions, which were executed via TanStack's legitimate release pipeline. OpenAI's investigation revealed that only limited credential material was exfiltrated from internal repositories, and no user data, production systems, or intellectual property were compromised. As a precaution, OpenAI is rotating its code-signing certificates, requiring macOS users to update their applications by June 12, 2026. Windows and iOS users are unaffected and do not need to take action. The incident highlights the growing risks associated with supply chain vulnerabilities in software development. 39 sources 58

Extracted Entities

OpenAI Confirms Security Breach Via TanStack npm Supply Chain Attack

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)

Malware (1)

MITRE ATT&CK (1)