TanStack supply chain attack forces OpenAI to mandate macOS app update by June 12 and harden signing pipelines

On May 13, 2026, OpenAI published its post-mortem on the "Mini Shai-Hulud" supply chain attack targeting TanStack's npm ecosystem. The incident prompted hardened signing certificates and system-level protections, plus a mandatory macOS app update deadline of June 12, 2026 — a tight window that signals active exposure, not precautionary hygiene. This attack vector — compromising a widely-used npm package to reach downstream build environments — remains the most underestimated threat in current AI stacks, where JS dependencies sit alongside inference pipelines and high-value API keys.

Separately, OpenAI documented the sandboxing architecture for Codex on Windows: controlled file access, network restrictions, isolated code execution. No benchmarks, no performance numbers — just a direct engineering response to the real problem of code agents running arbitrary code on developer machines. The two posts share a common thread: OpenAI is building a coherent security perimeter around its agents (Codex) and its distribution channels (signed apps, npm), likely under pressure from enterprise customers who are gating deployment on exactly these guarantees.