OpenAI said two employee devices were impacted after a widely used open-source library was targeted in a broader supply-chain attack known as "Mini Shai-Hulud". The company said limited credential material was stolen in the attack. OpenAI clarified that no user data or production systems were breached, adding that affected credentials were revoked following the incident.