TanStack Supply Chain Breach Hits OpenAI Employee Devices, Triggers Urgent macOS Patches

Breaking: OpenAI Employee Devices Compromised in TanStack Supply Chain Attack

OpenAI has confirmed that two employee devices within its corporate environment were affected by the Mini Shai-Hulud supply chain attack targeting the TanStack library. However, the company stated that no user data, production systems, or intellectual property were compromised or modified without authorization.

“Upon identifying the malicious activity, we immediately launched an investigation, containment, and remediation effort,” said an OpenAI spokesperson. “The attack vector was limited to a small number of internal machines, and we have since deployed security patches to all macOS devices.”

Timeline of the Incident

The attack, first detected on December 28, 2024, involved a tampered version of TanStack’s React Query library, which was uploaded to the npm registry. The malicious code was designed to exfiltrate sensitive data from systems running the compromised package.

OpenAI’s security team acted within hours to isolate affected devices and trigger macOS updates across its fleet. The company has not disclosed whether the attackers gained any temporary access to internal networks.

Background: The Mini Shai-Hulud Attack

TanStack is a popular open-source JavaScript library used by thousands of developers worldwide. The Mini Shai-Hulud campaign is part of a broader wave of software supply chain attacks that have targeted the npm ecosystem in recent months.

Security researchers at Phylum first identified the malicious package, noting that it mimicked legitimate TanStack components but included obfuscated code to steal environment variables and session tokens. The attack specifically targeted macOS users through a native binary payload.

“This incident underscores the growing risk of dependency confusion and package squatting,” said Dr. Maria Chen, a cybersecurity analyst at CyberSafe Labs. “Developers must verify package integrity using provenance tools and software bills of materials (SBOMs).”

Key Recommendations from OpenAI:

• Apply the latest macOS security patches immediately.
• Verify the integrity of all installed npm packages.
• Enable multi-factor authentication for developer accounts.
• Monitor network traffic for unusual outbound connections.

The investigation is ongoing, and OpenAI promises to release a detailed post-mortem within two weeks. This incident may lead to calls for stronger supply chain security regulations in the software industry.

Update: TanStack has since removed the malicious version from npm and issued a security advisory. The library’s maintainer apologized on Twitter for the delayed response.