OpenAI was hit by a supply chain attack involving hackers publishing a malicious version of Tanstack software used for web development.
On March 30, BeyondTrust proved that a crafted GitHub branch name could steal Codex’s OAuth token in cleartext. OpenAI classified it Critical P1. Two days later, Anthropic’s Claude Code source code ...