Our response to the TanStack npm supply chain attack

OpenAI recently identified and addressed a security incident involving the TanStack npm open-source library, a component of the broader Mini Shai-Hulud supply chain attack. Despite the compromise of two employee devices within the corporate environment, the company found no evidence of unauthorized access to user data, compromised production systems, or altered software.

Upon detecting malicious activity, OpenAI initiated a swift response, including investigation, containment, and engaging a third-party digital forensics firm. The company observed limited credential exfiltration from internal source code repositories accessible to the affected employees. However, there was no indication of customer data impact, intellectual property compromise, or misuse of exfiltrated credentials.

Immediate containment measures included isolating impacted systems, revoking user sessions, rotating credentials, and temporarily restricting code-deployment workflows. As a precautionary step, OpenAI is rotating code-signing certificates across all products. This necessitates that macOS users update their OpenAI applications to the latest versions. Users of Windows and iOS applications are not required to take any action.

This incident highlights a growing trend in cyberattacks targeting shared software dependencies and development tools. OpenAI is committed to bolstering its defenses against such ecosystem-level supply chain attacks by investing in controls that validate the integrity and provenance of third-party components. These measures aim to prevent similar incidents in the future and ensure the security of its interconnected software ecosystem.