CONNECT WITH US
AI & Deeptech

AI & Deeptech

Our response to the TanStack npm supply chain attack

OpenAI News logo

Published on

Add as a preferred source on Google
Our response to the TanStack npm supply chain attack

We are extending the update deadline for macOS users to June 26, 2026. We have been coordinating with Apple on this timeline to protect our users. New notarization with the previous certificate has been blocked, and we have found no evidence of malicious software being signed with any OpenAI certificate or unauthorized changes to our published software. These safeguards continue to help protect users by default while we complete the migration. You can update safely through an in-app update or at the official links below.

We recently identified a security issue involving a common open-source library, TanStack npm, that is part of a broader attack known as Mini Shai-Hulud⁠(opens in a new window). We found no evidence that OpenAI user data was accessed, that our production systems or intellectual property were compromised, or that our software was altered.

We have taken decisive steps to protect our user data, systems, and intellectual property. As part of our response, we are taking steps to protect the process that certifies our macOS applications are legitimate OpenAI apps.

We are updating our security certificates, which will require all macOS users to update their OpenAI apps to the latest versions. This helps prevent any risk, however unlikely, of someone attempting to distribute a fake app that appears to be from OpenAI. You can update safely through an in-app update or at the official links below:

The security and privacy of your information are a top priority. We’re committed to being transparent and taking quick action when issues arise.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.