{
  "entry": {
    "kind": "vuln",
    "slug": "openai-confirms-security-breach-via-tanstack-npm-supply-chain-attack",
    "name": "openai-confirms-security-breach-via-tanstack-npm-supply-chain-attack",
    "vendor": "Downstream of @tanstack/* npm packages compromised May",
    "description": "OpenAI confirmed that two employee workstations were silently compromised in the May 11 TanStack supply chain attack, exposing internal CI tokens and a subset of developer credentials. The company says no customer data was accessed, the compromised tokens have been rotated, and the affected machines re-imaged. The disclosure highlights that even AI vendors with mature security programs are downstream of the same npm supply-chain risks that hit their customers.",
    "website": "https://www.theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": null,
    "configFiles": null,
    "category": "agent",
    "updatedAt": "2026-05-15",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "openai-confirms-security-breach-via-tanstack-npm-supply-chain-attack",
      "aliases": [
        "ti-026"
      ],
      "title": "OpenAI Confirms Security Breach via TanStack npm Supply Chain Attack",
      "summary": "OpenAI confirmed that two employee workstations were silently compromised in the May 11 TanStack supply chain attack, exposing internal CI tokens and a subset of developer credentials. The company says no customer data was accessed, the compromised tokens have been rotated, and the affected machines re-imaged. The disclosure highlights that even AI vendors with mature security programs are downstream of the same npm supply-chain risks that hit their customers.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise",
        "Credential theft"
      ],
      "componentType": "agent",
      "component": {
        "name": "Downstream of @tanstack/* npm packages compromised May",
        "vendor": null,
        "package": null,
        "ecosystem": "npm",
        "catalogSlug": null
      },
      "affected": [
        {
          "range": "Downstream of @tanstack/* npm packages compromised May 11",
          "fixed": null
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-05-15",
      "modifiedAt": "2026-05-15",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019"
        }
      ],
      "mitigation": "Confirm none of the May 11 backdoored @tanstack/* versions are pinned in your lockfiles. Rotate any tokens passed through CI runners that ran installs in that window. Adopt vendor-signed-attestation enforcement in npm install where possible.",
      "detectedByAnomity": true
    }
  }
}