Shai-Hulud worm exploited GitHub Actions misconfiguration to poison shared cache, now project weighing nuclear option on ...
On May 11, 2026, several TanStack packages on npm were briefly replaced with malicious versions, raising fresh concerns about ...
Morning Overview on MSN
The TanStack supply chain attack poisoned 160 npm and PyPI packages — reaching OpenAI, Mistral AI, and UiPath through compromised build pipelines
On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source ...
Four supply-chain attacks hit OpenAI, Anthropic, and Meta in 50 days — none inside the model. A 7-row matrix maps what AI ...
Morning Overview on MSN
OpenAI says the TanStack breach reached two employee devices but did not compromise user data or production systems
Two developer workstations inside OpenAI installed compromised versions of the popular open-source TanStack library after an ...
A new wave of the Mini Shai-Hulud campaign compromised dozens of TanStack npm packages as part of a broader supply chain ...
OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and ...
3d
OpenAI confirms security breach in TanStack supply chain attack, but says no user data was affected
OpenAI has confirmed two employee devices were affected by the recent TanStack supply chain attack, but stressed the incident ...
OpenAI has rotated code-signing certificates after code repositories containing them were compromised in the TanStack supply ...
Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering ...
Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...
An attacker has published 84 malicious versions of official TanStack npm packages, with the impact including credential theft ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results