Tuesday, 21 July 2026 Sign in

Our response to the TanStack npm supply chain attack

OpenAI Blog 13 May 2026, 00:00

OpenAI responded to a TanStack npm supply chain attack called "Mini Shai-Hulud" by securing its systems and signing certificates. macOS users must update OpenAI apps by June 12, 2026 to maintain security. OpenAI is implementing strengthened defenses against software supply chain threats.

Why it matters

OpenAI details its response to the TanStack “Mini Shai-Hulud” supply chain attack, outlines protections taken to secure systems and signing certificates, and explains why macOS users must update OpenAI apps by June 12, 2026. Learn what happened, what was affected, and how OpenAI is strengthening defenses against evolving software supply chain threats.

Read the full story at OpenAI Blog

OpenAI AI Security

Every AI story that matters,
in your inbox by 8am.

TLDRocket reads 60+ sources, removes duplicate coverage, and summarises the day in two minutes. Free, no spam, unsubscribe anytime.

TLDRocket 21 July 2026

The open-weight AI model market hit an inflection point today as Alibaba and Kimi released trillion-parameter competitors that challenge the closed-model orthodoxy—just as Washington moved to restrict them. Alibaba's Qwen 3.8 Max (2.4 trillion parameters) and Kimi K3 (2.8T) are going open-weight, with K3 ranking first on Frontend Web App Arena and fourth on agentic benchmarks, signaling that scale and transparency can coexist. The timing matters: while U.S. policymakers weigh layered restrictions on Chinese open models, technical experts are pushing back hard, arguing that closed gardens actually hurt security and competition more than they help. The real fragmentation risk isn't technical—it's regulatory.

Read the full briefing →

Our response to the TanStack npm supply chain attack

Why it matters

Related stories

Every AI story that matters, in your inbox by 8am.

Every AI story that matters,
in your inbox by 8am.