Case openai-tanstack-worm-breachAI supply chainUnited States
OpenAI confirms two employee devices and source repos breached in Mini Shai-Hulud npm worm
OpenAI said malware from TeamPCP's TanStack and Mistral npm package compromise reached two employee laptops, giving access to a subset of internal repositories and exposing code-signing certificates it is now rotating.
HighAttack on AIStatus: ContainedVerified case file
Open in the interactive mapCite this case
- Reported
- May 14, 2026
- Location
- United States
- Target
- OpenAI internal source repositories
- Severity
- High
- Triggered by
- TeamPCP
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
OpenAI said malware from TeamPCP's TanStack and Mistral npm package compromise reached two employee laptops, giving access to a subset of internal repositories and exposing code-signing certificates it is now rotating.
Impact: Unauthorized access to a limited subset of internal source code repositories and theft of limited credentials; macOS, Windows, iOS and Android code-signing certificates exposed but not seen misused
Who triggered it
Actor: TeamPCP
Attribution: OpenAI linked the intrusion to the Mini Shai-Hulud campaign attributed to TeamPCP, which abused TanStack's GitHub Actions and CI/CD to publish malicious releases
Motive: Mass theft of developer and cloud credentials across the npm and PyPI ecosystems
How it happened
Attack vector: Trojanized npm packages installed on developer machines stealing credentials that unlocked internal repositories
Root cause: Transitive dependency compromise via a hijacked upstream release pipeline
Timeline
- Signed malicious TanStack and Mistral npm packages ship in the Mini Shai-Hulud wave
- OpenAI publishes advisory confirming two breached devices and repository access
- Deadline for macOS users to update OpenAI desktop apps before old certificates stop working
Response
Isolated systems, revoked sessions, rotated credentials and certificates, restricted deployment workflows and engaged a third-party forensics firm
Current status: Contained
Sources (open in a new tab)
- BleepingComputer bleepingcomputer.com
- BleepingComputer (campaign) bleepingcomputer.com
Cite this case
OpenAI confirms two employee devices and source repos breached in Mini Shai-Hulud npm worm. AI Threat Watch, case openai-tanstack-worm-breach, May 14, 2026. https://aithreat.io/cases/openai-tanstack-worm-breach/
Permanent link: https://aithreat.io/cases/openai-tanstack-worm-breach/