OpenAI Rotates Code-Signing Certificates After TanStack npm Incident

Summary

OpenAI says tainted npm packages compromised two employees’ workstations during the TanStack incident. It says code-signing certificates may have been exposed, is rotating them, and found no evidence of codebase or user-data leakage.

Key points

OpenAI says two employees’ workstations were compromised after they installed tainted npm packages during the TanStack supply-chain incident.
Code-signing certificates for iOS, macOS, and Windows may have been exposed; OpenAI says it is rotating them.
OpenAI says a small amount of credentials was exfiltrated, but its core codebase was not compromised and it found no evidence of user-data leakage.
The article advises users to update ChatGPT, Codex, and Atlas; it says macOS users must update manually, while Windows and iOS users need take no further action.
The article lists ChatGPT Desktop 1.2026.125, Codex Desktop 26.506.31421, Codex CLI 0.130.0, and Atlas 1.2026.119.1—and earlier versions—as affected.
The article said OpenAI planned to revoke the certificates on June 12, 2026, after which macOS would block software signed with the old credentials.

Article Details

Victim Organization: OpenAI
Incident Type: Supply-chain compromise involving tainted npm packages that compromised two employees’ workstations
Data Types Exposed: Credentials (a negligible quantity was reported exfiltrated)
Code-signing certificates (potentially exposed)
Affected Data Size: OpenAI said only a negligible quantity of credentials was exfiltrated; no quantity was given for potentially exposed certificates.
Operational Impact: OpenAI initiated containment and certificate rotation. macOS users were told to update their client software; Windows and iOS users were told no further action was needed. OpenAI said the core codebase was not compromised and there was no evidence of user-data leakage.
Ransom Or Extortion: Unknown
Claim Status: confirmed