News on this topic
OpenAI caught in TanStack npm supply chain chaos after employee devices compromised
theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019

More articles on this subject
Previous
OpenAI confirms security breach in TanStack supply chain attack: OpenAI says two employees' devices were breached in the recent TanStack supply chain attack ...
bleepingcomputer.com/news/security/openai-confirms-security-breach-in-tanstack-supply-chain-attack/

Next
Similar to This
Previous
GitHub links repo breach to TanStack npm supply-chain attack: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious ...
bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/

AI supply-chain attacks bypass model red teams: Four supply-chain attacks hit OpenAI, Anthropic, and Meta in 50 days — none inside the model ...
venturebeat.com/ai/supply-chain-incidents-openai-anthropic-meta-release-surface-vendor-questionnaire-matrix

OpenAI Tells Mac Users to Update Apps After Software Supply Chain Attack: OpenAI was hit by a supply chain attack involving hackers publishing a malicious ...
uk.pcmag.com/ai/164952/openai-tells-mac-users-to-update-apps-after-software-supply-chain-attack

OpenAI says hackers stole some data after latest code security issue: OpenAI said the damage was limited to the employees’ devices, and did not affect user data ...
techcrunch.com/2026/05/14/openai-says-hackers-stole-some-data-after-latest-code-security-issue/

OpenAI says no user data breached after security issue with open-source library: OpenAI said on Wednesday it found no evidence that its user data was accessed ...
reuters.com/business/openai-says-no-user-data-breached-after-security-issue-with-open-source-library-2026-05-14/

Protect your enterprise now from the Shai-Hulud worm and npm vulnerability in 6 actionable steps
venturebeat.com/security/shai-hulud-worm-172-npm-pypi-packages-valid-provenance-ci-cd-audit

Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650

Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/

Vibe code full-stack apps fast with TanStack Start: TanStack Start brings file-based routing, type-safe server functions, and streaming SSR to vibe coders who ...
thenewstack.io/tanstack-start-vibe-coding/

Next