Our response to the TanStack npm supply chain attack
Source: OpenAI News · Category: AI Risk & Safety
OpenAI disclosed TanStack npm supply chain attack (Mini Shai-Hulud), responded with signing certificates and system hardening. macOS users must update by June 12, 2026. This highlights vulnerability of AI tool dependencies to supply chain compromise. Action: audit third-party integrations and dependencies in firm's AI tooling; enforce update cadence for critical tools.