OpenAI Discloses TanStack Supply Chain Attack on Employees

OpenAI disclosed that two employee devices were compromised in a supply chain attack targeting the open-source TanStack library, prompting the company to rotate code-signing certificates for its applications as a precaution.

The incident, detailed in a company security advisory published this week, stemmed from malicious updates to TanStack npm packages as part of a broader campaign known as Mini ShaiHulud. Attackers exploited vulnerabilities in GitHub Actions workflows and continuous integration systems to publish 84 malicious versions across 42 TanStack packages, some with millions of weekly downloads. The malware focused on stealing developer credentials, including GitHub tokens, npm publish tokens, AWS keys, SSH keys and environment files. It also established persistence on infected systems and self-propagated to other packages maintained by victims.

OpenAI reported observing activity consistent with the malware's described behavior, including unauthorized access and credential exfiltration, in a limited subset of internal source code repositories accessible to the affected employees. "We confirmed that only limited credential material was successfully exfiltrated from these...