TanStack Supply‑Chain Attack Impacts OpenAI Devices — macOS Requires Updates

Colleagues, a heads‑up: a TanStack supply‑chain attack affected two corporate OpenAI devices. OpenAI reports the Mini Shai‑Hulud malware accessed those machines; a limited set of credentials were exfiltrated, and production systems and IP were not altered. The company isolated affected systems, revoked sessions, rotated credentials, and reissued code‑signing certificates. macOS users of ChatGPT Desktop, Codex and related apps must update by 12 June — older signatures will be blocked thereafter. Why it matters: supply‑chain incidents propagate risk rapidly—review CI/CD and apply updates. Have you checked your pipelines and code‑signing? #cybersecurity #supplychain #updates #DevSecOps