Supply-chain attack threatened developers using thousands of TanStack packages
A TanStack supply-chain attack impacted two OpenAI employee devices and compromised hundreds of packages associated with TanStack. OpenAI said that user data, production systems, and intellectual property were not compromised, but limited credential material was exfiltrated from a restricted set of source-code repositories.
CERT24