OpenAI hit by supply chain attack linked to malicious TanStack packages


OpenAI hit by supply chain attack linked to malicious TanStack packages

Pierluigi Paganini
May 16, 2026

OpenAI said the TanStack supply chain attack compromised two employee devices and exposed credentials from code repositories.

OpenAI confirmed that the recent TanStack supply chain attack compromised two employee devices and exposed credential material stored in internal source code repositories. The incident began after the TeamPCP hacking group abused weaknesses in the package publishing process to distribute 84 malicious packages tied to the TanStack open source development ecosystem.

Recently, the TeamPCP group launched a new wave of the Mini Shai-Hulud worm, compromising legitimate npm packages through hijacked GitHub Actions OIDC tokens. The malware spread through trusted release pipelines and even generated valid SLSA Level 3 attestations, making the malicious packages appear legitimate. Researchers say the worm steals secrets from CI/CD environments, targets more than 100 credential locations, installs persistence mechanisms in developer tools like VS Code and Claude Code, and spreads automatically to other packages controlled by compromised maintainers. The campaign has already affected packages linked to TanStack, UiPath, DraftLab, and others.

The recent TanStack supply chain attack also impacted OpenAI after two employee devices downloaded malicious packages tied to the Mini Shai-Hulud campaign. Attackers stole credential material and secrets from those systems, gaining access to a limited number of internal source code repositories connected to the affected employees.

OpenAI said the security breach had a limited impact and found no evidence that customer data, production systems, or intellectual property were compromised. The company responded by rotating exposed credentials, revoking active sessions, and temporarily tightening restrictions around code deployment workflows.

“We observed activity consistent with the malware’s publicly described behavior, including unauthorized access and credential-focused exfiltration activity, in a limited subset of internal source code repositories to which the two impacted employees had access.” reads the post published by OpenAI. “We confirmed that only limited credential material was successfully exfiltrated from these code repositories and that no other information or code was impacted.”

The compromised repositories included code-signing certificates used for iOS, macOS, Windows, and Android applications. As a precaution, OpenAI revoked the certificates and began re-signing affected software packages.

“We are updating our security certificates, which will require all macOS users to update their OpenAI apps to the latest versions.” continues the post. “This helps prevent any risk, however unlikely, of someone attempting to distribute a fake app that appears to be from OpenAI.”

The company warned that macOS users must update their OpenAI applications before June 12, 2026, or the software may stop receiving updates and could eventually stop functioning correctly.

OpenAI also coordinated with platform providers to block any attempt to abuse the stolen certificates for malicious notarization activities and reviewed previously signed software for signs of tampering.

“We have also reviewed all notarization of software using our previous certificates to confirm no unexpected software signing has occurred with these keys, and validated that our published software did not have unauthorized modifications.” states OpenAI. “We have found no evidence of compromise or risk to existing software installations.”

According to the company, the incident occurred during an ongoing migration to hardened configurations introduced after the earlier Axios supply chain attack. The two infected employee devices had not yet received the updated protections that likely would have blocked the malicious package downloads.

“This incident reflects a broader shift in the threat landscape: attackers are increasingly targeting shared software dependencies and development tooling rather than any single company.” concludes the company.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, supply chain attack)







Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews



In short: Accel has raised $5 billion in new capital, comprising a $4 billion Leaders Fund V and a $650 million sidecar, targeting 20-25 late-stage AI investments at an average cheque size of $200 million. The raise follows standout returns from its Anthropic stake (invested at $183B, now valued near $800B) and Cursor (backed at $9.9B, now reportedly around $50B), and lands in a Q1 2026 venture market that deployed a record $297 billion.

Accel, the venture capital firm behind early bets on Facebook, Slack, and more recently Anthropic and Cursor, has raised $5 billion in new capital aimed squarely at AI. The raise, reported by Bloomberg, comprises $4 billion for its fifth Leaders Fund and a $650 million sidecar vehicle, positioning the firm to write average cheques of around $200 million into late-stage AI companies globally.

The fund lands in a venture capital market that has lost any pretence of restraint. Q1 2026 saw $297 billion flow into startups worldwide, 2.5 times the total from Q4 2025 and the most venture funding ever recorded in a three-month period. Andreessen Horowitz has raised $15 billion. Thrive Capital has closed more than $10 billion. Founders Fund is finishing a $6 billion raise. Accel’s $5 billion is substantial but not exceptional in a market where the biggest funds are measured in the tens of billions.

The portfolio that made the pitch

What distinguishes Accel’s fundraise is the portfolio it can point to. The firm invested in Anthropic during its Series G at a $183 billion valuation. Anthropic has since closed a round at $380 billion and is now attracting offers at roughly $800 billion, meaning Accel’s stake has more than quadrupled in value in a matter of months. Anthropic’s annualised revenue has hit $30 billion, a trajectory that no company in history has matched.

The firm’s bet on Cursor has been similarly well-timed. Accel backed the AI code editor in June 2025 at a $9.9 billion valuation. By November, Cursor had raised again at $29.3 billion. By March 2026, the company was reportedly in discussions at a valuation of around $50 billion. For a developer tool that barely existed two years ago, the appreciation is extraordinary.

Accel’s broader AI portfolio extends beyond these two headline positions. The firm has backed Vercel, the frontend deployment platform; n8n, an AI-powered automation tool; Recraft, a professional design platform; and Code Metal, which builds AI development tools for hardware and defence applications. In March 2026, Accel launched an Atoms AI programme in partnership with Google’s AI Futures Fund, selecting five early-stage companies from what it described as a global applicant pool focused on “white space” opportunities in enterprise AI.

The Leaders Fund model

Accel’s Leaders Fund series is designed for later-stage investments, the kind of large cheques that growth-stage AI companies now require. With an average investment size of $200 million and a target of 20 to 25 deals from the new $4 billion fund, the strategy is concentrated: a small number of high-conviction bets on companies that have already demonstrated product-market fit and are scaling revenue.

This is a different game from traditional venture capital. At $200 million per cheque, Accel is competing less with seed and Series A firms and more with the mega-funds, sovereign wealth funds, and corporate investors that have flooded into late-stage AI. The firm’s argument is that its early-stage relationships and technical evaluation capabilities give it an edge in identifying which companies deserve capital at scale, and in securing allocations in rounds that are massively oversubscribed.

Founded in 1983 by Arthur Patterson and Jim Swartz, Accel built its reputation on what the founders called the “prepared mind” approach, a philosophy of deep sector research before investments materialise. The firm’s most famous prepared-mind bet was its 2005 investment of $12.7 million for 10% of Facebook, a stake worth $6.6 billion at the company’s IPO seven years later. The question now is whether Accel’s AI bets will produce returns of comparable magnitude.

What the market is pricing

The sheer volume of capital flowing into AI venture funds reflects a market consensus that artificial intelligence will be the dominant technology platform of the next decade. The numbers are difficult to overstate. OpenAI raised $120 billion in 2026. Anthropic has raised more than $50 billion. xAI closed $20 billion. Waymo secured $16 billion. These are not venture-scale numbers; they are infrastructure-scale capital deployments that would have been unthinkable outside of telecommunications or energy a decade ago.

For limited partners, the investors who commit capital to venture funds, the logic is straightforward: the returns from AI’s winners will be so large that even paying premium valuations will generate exceptional multiples. Accel’s Anthropic position, where a single investment has appreciated several times over in months, is exactly the kind of outcome that makes LPs willing to commit $5 billion to a single firm’s next fund.

The risk is equally visible. Venture capital is a cyclical business, and the current fundraising boom has the characteristics of a cycle peak: record fund sizes, compressed deployment timelines, and a concentration of capital in a single sector. The last time venture capital raised this aggressively, during the 2021 ZIRP era, many of those investments were marked down significantly within two years. AI’s commercial traction is far stronger than the crypto and fintech bets that defined that earlier cycle, but the valuations being paid today leave little margin for error.

The concentration question

Accel’s fund also highlights a structural shift in venture capital. The industry is bifurcating into a small number of mega-firms that can write cheques of $100 million or more and a long tail of smaller funds that compete for earlier-stage deals. The middle ground, the traditional Series B and C investors, is being squeezed by mega-funds moving downstream and by AI companies that skip traditional funding stages entirely, going from seed round to billion-dollar valuations in 18 months.

For a firm like Accel, which operates across offices in Palo Alto, San Francisco, London, and India, the $5 billion raise is a bet that it can maintain its position in the top tier as fund sizes inflate and competition for the best deals intensifies. Its portfolio of 1,199 companies, 107 unicorns, and 46 IPOs provides a track record. But in a market where Anthropic alone could generate returns that justify an entire fund, the temptation to concentrate bets on a handful of AI winners is strong, and the consequences of getting those bets wrong are correspondingly severe.

The broader picture is that AI venture capital has entered a phase where the funds themselves are becoming as large as the companies they once backed. Accel’s $5 billion raise would have made it one of the most valuable startups in Europe just a few years ago. Now it is table stakes for a firm that wants to participate meaningfully in the rounds that matter. Whether this represents rational capital allocation or the peak of a cycle that will eventually correct is the question that every LP writing a cheque today is, implicitly or explicitly, answering in the affirmative.



Source link