TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

A widespread supply-chain campaign using the Shai-Hulud worm (attributed to TeamPCP and linked actors) trojanized numerous open-source packages (TanStack, Mistral AI, Guardrails AI, UiPath, OpenSearch) to deliver a modular credential-stealing and exfiltration toolkit; OpenAI confirmed two employee devices were impacted and limited repository credential material was exfiltrated, prompting credential rotation and code-signing certificate revocations. The malware contains a hard-coded primary C2 IP (83.142.209.194), a FIRESCALE fallback that pulls an alternative server URL from public GitHub commits verified by an embedded RSA key, collects AWS credentials across all availability zones (including GovCloud), and includes geo-fenced destructive behavior and extensive credential/SSH/docker harvesting, while the threat actors are publicly offering the worm and threatening to sell or leak stolen code.