2026-05-14 · 2026-Q2
OpenAI Internal Source Code and Certificate Theft via TanStack Worm
Outside the model: Adjacent ecosystemAgent tooling was not the attack surface, so no layer applies.
- Fixable
- Vendor patch
- Vendor response
- Patched
- In the wild
- Yes
- Actor
- Not applicable
Target
OpenAI internal source-code repositories and code-signing certificates
Impact
Attackers stole limited credential material and digital certificates used to sign OpenAI products from a limited subset of internal repositories after two employee devices were infected; OpenAI said no user data, production systems, or intellectual property were compromised and rotated affected certificates, forcing a macOS app update
Root cause
The compromise of the open-source TanStack library, where attackers published 84 malicious versions in a roughly six-minute window (part of the Mini Shai-Hulud worm), infected the developer machines that reached OpenAI's repositories
Sources
Catalog
Cite this: AgentProv incident record: OpenAI Internal Source Code and Certificate Theft via TanStack Worm (2026-05-14). https://agentprov.com/incidents/2026-05-14-openai-internal-source-code-and-certificate-theft-via-tanstack-worm