OpenAI confirms security breach in TanStack supply chain attack

OpenAI disclosed that two employee devices were breached as part of the Mini Shai-Hulud supply-chain campaign linked to the TeamPCP extortion gang, which trojanized hundreds of npm and PyPI packages to steal developer and cloud credentials; OpenAI said customer data and production systems were not impacted but rotated code-signing certificates and performed containment and forensic response.