OpenAI has confirmed the security breach. According to the company, two employee devices were compromised during a large-scale software supply chain attack connected to the TanStack npm ecosystem.

On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source ...

A poisoned open-source dependency let attackers breach two OpenAI employee devices and steal credentials from a limited set of its internal source code repositories, OpenAI confirmed in a May 14, 2026 ...

OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

On April 29, 2026, someone slipped malicious code into four widely used SAP software packages. Within days, the infection had ...

Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

Mini Shai-Hulud worm compromises 169 npm packages including TanStack Mistral AI; TeamPCP uses stolen OIDC tokens.

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Short sellers are easing off broad wagers against the software sector after a bruising winter slump, but positioning in several individual stocks suggests bearishness is still running rampant below ...

Gupta provided fiscal year 2027 guidance, stating, "For the full fiscal year 2027, we expect revenue in the range of $1.754 billion to $1.759 billion, ARR in the range of $2.051 billion to $2.056 ...

UiPath Q4 Earnings Estimates Analysts expect UiPath to report fourth-quarter revenue of $464.8 million, up from $423.7 million in last year's fourth quarter, according to data from Benzinga Pro. The ...