2026-05-14 · 2026-Q2
OpenAI Internal Source Code and Certificate Theft via TanStack Worm
Outside the model: Adjacent ecosystem Agent tooling was not the attack surface, so no layer applies.
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- Yes
Target
OpenAI internal source-code repositories and code-signing certificates
Impact
Attackers stole limited credential material and digital certificates used to sign OpenAI products from a limited subset of internal repositories after two employee devices were infected; OpenAI said no user data, production systems, or intellectual property were compromised and rotated affected certificates, forcing a macOS app update
Root Cause
The compromise of the open-source TanStack library, where attackers published 84 malicious versions in a roughly six-minute window (part of the Mini Shai-Hulud worm), infected the developer machines that reached OpenAI's repositories