Our response to the TanStack npm supply chain attack
OpenAI has detailed its response to the "Mini Shai-Hulud" supply chain attack targeting the popular npm package TanStack. The company's security team investigated internal systems after the attack, which affected multiple commonly used npm packages, and found no evidence of user data leakage or unauthorized access. While OpenAI's core services were not directly impacted, macOS users are advised to update their OpenAI applications by June 12, 2026, to ensure local environment security. AI
IMPACT Ensures the security of AI application distribution channels and user data.