OpenAI Faces Supply Chain Attack, Urges macOS Users to Update Apps
OpenAI has announced a potential security incident involving a supply chain attack that executed a malicious version of the Axios package on March 31, 2026. While the company’s investigation found no evidence of compromised user data or systems, it is taking precautionary measures by rotating its macOS code-signing certificates.
The incident does not affect OpenAI’s web services or apps on platforms like iOS, Android, or Windows. However, macOS users must update their OpenAI applications to versions signed with the new certificate by May 8, 2026, to avoid disruptions.
The attack, attributed to North Korean threat actors, exploited social engineering tactics to gain access to a maintainer’s account and publish harmful software. Users are advised to update their apps via official channels and avoid installing software from unverified sources.
Risk Level: Medium
Source: View Original Report
