OpenAI stated that the malicious software used in the Shai Hulud supply chain attack accessed the internal code repository by infecting two employee devices. (Decrypt)