TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

OpenAI disclosed that two employee devices were compromised via the TanStack supply chain attack, but no user data or production systems were affected.

• •Limited credential material was exfiltrated from internal source code repositories
• •Code-signing certificates for macOS, iOS, and Windows were revoked; macOS users must update apps by June 12, 2026
• •The attack exploited CI pipeline mechanisms to steal publish tokens through a cache trusted by all parties
• •Malware includes sophisticated C2 server discovery using GitHub public commits as fallback mechanism
• •Campaign includes destructive wiper functionality targeting devices in Israel and Iran with geolocation-based activation

This summary was automatically generated by AI based on the original article and may not be fully accurate.