On May 11, 2026, the TeamPCP hacking group exploited weaknesses in the TanStack package publishing process, releasing 84 malicious artifacts across 42 packages, affecting over 170 packages in total. This supply chain compromise infected developer devices with the Shai-Hulud worm. OpenAI was affected downstream when two employee devices were infected, resulting in credential and secret exfiltration from internal source code repositories. The compromised credentials allowed attackers limited access to internal repositories but did not impact customer data or intellectual property. OpenAI responded by rotating credentials, revoking user sessions, restricting deployment workflows, and revoking and reissuing code-signing certificates for iOS, macOS, Windows, and Android products. macOS users must update their apps by June 12, 2026, to continue receiving updates and avoid potential functionality issues. OpenAI coordinated with platform providers to prevent misuse of stolen certificates and confirmed no unauthorized software signing or modifications occurred. The attack happened during a phased transition to hardened security configurations prompted by a previous supply chain attack affecting OpenAI's macOS signing certificates.

The attack resulted in the compromise of two employee devices and the exfiltration of limited credential material from OpenAI's internal source code repositories. This allowed attackers limited access to internal code repositories but did not affect customer data or intellectual property. The compromised repositories contained code-signing certificates, which OpenAI revoked and reissued to prevent potential misuse. No evidence was found of unauthorized software modifications or compromise of existing software installations. The incident caused operational impacts requiring credential rotation, session revocation, deployment restrictions, and mandatory application updates for macOS users.

OpenAI has implemented remediation by rotating all affected credentials, revoking user sessions, and temporarily restricting code deployment workflows. The company revoked and reissued all compromised code-signing certificates and coordinated with platform providers to prevent malicious use of stolen certificates. macOS users are required to update their OpenAI applications by June 12, 2026, to continue receiving updates and maintain functionality. OpenAI confirmed no unauthorized software signing or modifications occurred and found no risk to existing installations. Organizations should monitor vendor advisories for any further updates. Patch status is effectively managed by OpenAI through these actions.