OpenAI Mandates macOS App Updates After Axios Attack

OpenAI announced on Friday that it is requiring all macOS users to update its desktop applications after a supply chain attack compromised a third-party library used in the company's software signing process. The incident, detected on March 31, 2026, involved a malicious version of the popular JavaScript library Axios, which OpenAI's automated GitHub Actions workflow downloaded and executed. As a precaution, OpenAI is revoking its macOS code-signing certificates, effective May 8, 2026, to prevent any potential misuse by attackers.

The affected applications include ChatGPT Desktop, Codex, Codex CLI, and Atlas. These certificates verify that software originates from OpenAI and has not been tampered with. OpenAI's internal investigation, supported by a third-party digital forensics firm, found no evidence that user data was accessed, systems were compromised, intellectual property was stolen, or software was altered. However, the company is treating the certificates as potentially exposed due to the workflow's access during the brief execution of the malicious code.

"We found no evidence that OpenAI user data was accessed, that our systems or intellectual property was compromised,...