OpenAI caught in TanStack npm supply chain chaos after employee devices compromised

OpenAI was impacted by a TanStack npm supply-chain compromise tied to the "Mini Shai-Hulud" campaign and TeamPCP, where malicious package updates reached two employee devices and led to limited exfiltration of internal credentials; OpenAI rotated signing certificates for several desktop products and reported no evidence of production or customer data being breached.