OpenAI asks macOS users to update after TanStack npm supply chain attack