OpenAI confirms hackers breached internal systems via a compromised open-source package, targeting AI development tools.