OpenAI hit by a supply-chain attack linked to malicious TanStack packages

OpenAI said that downloading malicious packages linked to the Mini Shai-Hulud campaign affected two employee devices and exposed limited credential material from internal source-code repositories. OpenAI said it found no evidence that customer data, production systems, intellectual property, or existing software installations were compromised.