OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.