cyber.hendryadrian.com
Security News · bleepingcomputer.com

OpenAI to Revoke and Rotate macOS Signing Certificates After Axios Attack

· Original article ↗

Summary

After a GitHub Actions workflow ran compromised Axios 1.14.1, OpenAI began rotating macOS app signing certificates as a precaution. It reported no evidence of misuse or data exposure and required users to update by May 8, 2026.

Key points

  • On March 31, 2026, an OpenAI GitHub Actions workflow executed compromised Axios package version 1.14.1 and had access to certificates used to sign its macOS apps.
  • OpenAI and a third-party incident response firm found no evidence that the certificates were exposed or misused, or that user data, systems, intellectual property, or software were compromised.
  • OpenAI is rotating the certificates as a precaution and said the old certificate would be fully revoked on May 8, 2026; older app versions may then be blocked by macOS.
  • The affected macOS apps include ChatGPT Desktop, Codex, Codex CLI, and Atlas. OpenAI said its web services and iOS, Android, Windows, and Linux apps were unaffected.
  • Researchers linked the Axios supply-chain attack to UNC1069, which allegedly used social engineering to gain access to a maintainer account and publish malicious npm packages that install a cross-platform RAT.
  • OpenAI advised users to update through in-app features or official download pages and avoid software links from emails, ads, or third-party sites.

Article Details

Event Type
Supply-chain attack involving a compromised Axios package executed in a GitHub Actions workflow, prompting OpenAI to rotate its macOS code-signing certificates.
Impact
OpenAI said its investigation found no evidence of certificate misuse, user-data exposure, system or intellectual-property compromise, or altered software. The certificate was treated as potentially compromised out of caution. macOS users must update OpenAI apps to versions signed with the new certificate before the old certificate is fully revoked on May 8, 2026; other platforms and web services were reported unaffected.

Threat Actors

UNC1069Researchers linked the Axios supply-chain attack to UNC1069. The article reports that the group used social engineering against an Axios maintainer and published malicious Axios package versions; this is reported attribution, not independently confirmed in the article.

Vendors

AppleTherefore, to reduce the risk, OpenAI says it is working with Apple to ensure no future software can be notarized with the previous certificate.OpenAIOpenAI is revoking and rotating macOS code-signing certificates after a GitHub Actions workflow executed a compromised Axios package (v1.14.1) in a supply chain attack.

Products

AtlasThe affected workflow had access to OpenAI macOS code-signing certificates for ChatGPT Desktop, Codex, Codex CLI, and Atlas.AxiosOpenAI is revoking and rotating macOS code-signing certificates after a GitHub Actions workflow executed a compromised Axios package (v1.14.1) in a supply chain attack.ChatGPT DesktopThe affected workflow had access to OpenAI macOS code-signing certificates for ChatGPT Desktop, Codex, Codex CLI, and Atlas.CodexThe affected workflow had access to OpenAI macOS code-signing certificates for ChatGPT Desktop, Codex, Codex CLI, and Atlas.Codex CLIThe affected workflow had access to OpenAI macOS code-signing certificates for ChatGPT Desktop, Codex, Codex CLI, and Atlas.GitHub ActionsOpenAI is revoking and rotating macOS code-signing certificates after a GitHub Actions workflow executed a compromised Axios package (v1.14.1) in a supply chain attack.

Related Articles