{"id":45354,"date":"2026-04-13T20:08:11","date_gmt":"2026-04-13T12:08:11","guid":{"rendered":"https:\/\/nuoya.nuoyayasuo.top\/index.php\/2026\/04\/13\/openai-revokes-macos-app-certificate-after-malicious-axios-supply-chain-incident\/"},"modified":"2026-04-13T20:08:11","modified_gmt":"2026-04-13T12:08:11","slug":"openai-revokes-macos-app-certificate-after-malicious-axios-supply-chain-incident","status":"publish","type":"post","link":"https:\/\/nuoya.nuoyayasuo.top\/index.php\/2026\/04\/13\/openai-revokes-macos-app-certificate-after-malicious-axios-supply-chain-incident\/","title":{"rendered":"OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident"},"content":{"rendered":"
\"OpenAI<\/a><\/div>\n

OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user data or internal system was compromised.<\/p>\n

“Out of an abundance of caution, we are taking steps to protect the process that certifies our macOS applications are legitimate OpenAI apps,” OpenAI said<\/a> in a post last week. “We found no evidence that OpenAI user data was accessed, that our systems or intellectual property were compromised, or that our software was altered.”<\/p>\n

The disclosure comes a little over a week after Google Threat Intelligence Group (GTIG) attributed the supply chain compromise<\/a> of the popular npm package to a North Korean hacking group it tracks as UNC1069<\/a>.<\/p>\n

The attack enabled the threat actors to hijack the package maintainer’s npm account to push two poisoned versions 1.14.1 and 0.30.4 that came embedded with a malicious dependency named “plain-crypto-js,” which deployed a cross-platform backdoor called WAVESHAPER.V2 to infect Windows, macOS, and Linux systems.<\/p>\n

The artificial intelligence (AI) company said a GitHub Actions workflow it uses as part of its macOS app-signing process downloaded and executed Axios version 1.14.1. The workflow, it added, had access to a certificate and notarization material used for signing ChatGPT Desktop, Codex, Codex CLI, and Atlas.<\/p>\n

“Our analysis of the incident concluded that the signing certificate present in this workflow was likely not successfully exfiltrated by the malicious payload due to the timing of the payload execution, certificate injection into the job, sequencing of the job itself, and other mitigating factors,” the company said.<\/p>\n

Despite finding no evidence of data exfiltration, OpenAI said it’s treating the certificate as compromised and that it’s revoking and rotating it. As a result, older versions of all its macOS desktop apps will no longer receive updates or support starting May 8, 2026.<\/p>\n

This also means that apps signed with the previous certificate will be blocked by macOS security protections by default, preventing them from being downloaded or launched. The earliest releases signed with their updated certificate are listed below –<\/p>\n