OpenAI Says TanStack Supply-Chain Attack Exposed Limited Repository Credentials

Summary

OpenAI says two employee devices were infected in the TanStack supply-chain attack, exposing internal repositories and resulting in limited credential-material exfiltration. The company rotated credentials, revoked certificates and is requiring macOS app updates.

Key points

OpenAI says two employee devices were infected during the TanStack supply-chain attack after they downloaded malicious packages.
The compromised devices enabled access to internal source-code repositories; OpenAI confirmed limited credential material was exfiltrated from them.
OpenAI says no other repository information or code, customer data, or intellectual property was affected.
The repositories contained code-signing certificates for OpenAI products; the company revoked the certificates and is re-signing its applications.
OpenAI rotated affected credentials, revoked user sessions and temporarily restricted code-deployment workflows.
OpenAI said macOS users would need to update their apps by June 12, 2026, and that it found no evidence of unauthorized software modifications or risk to existing installations.
The article attributes the broader campaign to TeamPCP and says it involved 84 malicious artifacts across 42 TanStack packages, alongside compromises in other NPM and PyPI namespaces.

Article Details

Victim Organization: OpenAI
Incident Type: Supply-chain attack involving malicious package releases that infected employee devices and led to credential-material exfiltration
Data Types Exposed: Credential material
Other secrets
Affected Records: Unknown
Affected Data Size: Unknown
Operational Impact: Two employee devices were infected, and the attackers gained access to internal source code repositories accessible to those employees. OpenAI rotated credentials, revoked user sessions, temporarily restricted code-deployment workflows, revoked code-signing certificates, and re-signed applications. macOS users were told to update their applications by June 12, 2026. OpenAI reported no impact to customer data or intellectual property and no evidence of compromise or risk to existing software installations.
Ransom Or Extortion: Unknown
Claim Status: confirmed

Threat Actors

TeamPCPThe article identifies TeamPCP as the hacking group that exploited weaknesses in the package publishing process to release malicious artifacts.

Malware

Shai-HuludDeveloper devices were infected with the Shai-Hulud worm.

Products

TanStackOpenAI has disclosed the impact of the recent TanStack supply chain attack, warning that credential material was exfiltrated from internal source code repositories.