NewsPublished 15 May 2026

OpenAI Hit by TanStack Supply Chain Attack

Source SecurityWeek

Description

Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories. The post OpenAI Hit by TanStack Supply Chain Attack appeared first on SecurityWeek .

Impact

The attack resulted in the compromise of two employee devices and the exfiltration of limited credential material from OpenAI's internal source code repositories. This allowed attackers limited access to internal code repositories but did not affect customer data or intellectual property. The compromised repositories contained code-signing certificates, which OpenAI revoked and reissued to prevent potential misuse. No evidence was found of unauthorized software modifications or compromise of existing software installations. The incident caused operational impacts requiring credential rotation, session revocation, deployment restrictions, and mandatory application updates for macOS users.

Defensive guidance

OpenAI has implemented remediation by rotating all affected credentials, revoking user sessions, and temporarily restricting code deployment workflows. The company revoked and reissued all compromised code-signing certificates and coordinated with platform providers to prevent malicious use of stolen certificates. macOS users are required to update their OpenAI applications by June 12, 2026, to continue receiving updates and maintain functionality. OpenAI confirmed no unauthorized software signing or modifications occurred and found no risk to existing installations. Organizations should monitor vendor advisories for any further updates. Patch status is effectively managed by OpenAI through these actions.

References

securityweek.com/openai-hit-by-tanstack-supply-chain-attack/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 15 May 2026, 10:51 UTC

References

Community reviews