In a decisive security move, OpenAI has announced that all macOS users must update their desktop applications as soon as possible. This urgent action follows the disclosure of a complex cyberattack targeting the supply chain of the popular JavaScript software library, Axios. Believed to be backed by North Korean hackers, the attack compromised the company’s code-signing pipeline, prompting a decision to completely revoke its digital authentication certificates—a decision that will take effect on May 8.
Supply chain attacks are among the most dangerous modern cyber threats, with hackers targeting intermediate software components relied upon by major enterprises rather than directly attacking hardened systems. In this case, the Axios library was the weak link exploited to access larger, more complex systems.
Details of the attack on the Axios software library
On March 31, a group of hackers managed to breach the npm account of developer Jason Syman, the lead maintainer of the Axios library. This breach was not random; it resulted from a targeted, carefully planned social engineering campaign. The campaign involved contacting the developer via fake company accounts, holding bogus meetings, and eventually convincing him to install malware that granted attackers remote access to his computer.
Planting malicious code and rapid spread
Once they obtained the lead maintainer’s credentials, the hackers quickly published two modified, malicious versions of Axios: 1.14.1 and 0.30.4. These versions contained a bogus software dependency named “plain-crypto-js,” which in turn included a cross-platform remote access trojan (RAT).
Although these malicious versions were available for download for only about three hours before being discovered and removed, the impact was catastrophic. Axios is a cornerstone of web development, averaging over 100 million downloads per week and present in roughly 80 percent of cloud computing environments, according to estimates by Wiz cited in specialized media reports.
Entities responsible for the cyberattack
Major tech companies rushed to analyze the attack and trace its source. Google attributed the breach to a North Korea-linked hacking group it tracks as UNC1069, active since at least 2018 and known for financial motivations. Separately, Microsoft independently reached the same conclusion, attributing the attack to a group it tracks as Sapphire Sleet.
These analyses indicate that state-backed hackers possess advanced capabilities to infiltrate open-source infrastructure, posing an ongoing, profound threat to the global digital economy.
How OpenAI applications were affected
On April 12, OpenAI transparently disclosed details of its exposure to the attack. The company explained that a GitHub Actions workflow used to sign its macOS applications—including ChatGPT Desktop, Codex, its CLI, and Atlas—downloaded the malicious Axios version 1.14.1 during the March 31 window.
Revocation of certificates and security measures
Code-signing certificates serve as a digital passport confirming to the operating system that incoming software is safe and has not been tampered with by a third party. Because the workflow in question had access to these certificates, the company chose to treat the data as compromised as a strict precautionary measure, despite finding no evidence that data was actually exfiltrated.
The company is currently working closely with Apple to prevent any future authentication using the old certificate. Consequently, older versions of the apps will stop working entirely after the complete certificate revocation on May 8. Therefore, updating is mandatory, not optional, for users to ensure secure continued service, as operating systems will block software bearing revoked certificates to protect users.
Concerning rise in open-source malware
The Axios breach was not an isolated incident, arriving amid a rising wave of threats targeting open-source software. According to Sonatype’s Q1 2026 State of the Software Supply Chain report, 21,764 malicious packages were recorded in the first quarter alone—equivalent to a new malicious package appearing every six minutes.
With these alarming statistics, the total number of malicious packages discovered since 2017 rises to nearly 1.35 million. The npm registry alone accounted for 75 percent of the new malicious packages.
Sonatype highlighted the Axios breach alongside the LLM Lite breach and the Sandworm Mod campaign as major security incidents shaping the first quarter. In its report, the organization stated:
“The largest open-source attacks in Q1 succeeded not because they used novel or groundbreaking techniques, but because the attackers successfully exploited trust in packages, trusted release pipelines, and standard developer workflows.”
In conclusion, this incident highlights the importance of continuous vigilance in software development, the necessity for users to update apps, and the application of security patches as soon as they are released to keep data and systems safe from evolving threats exploiting digital trust as an entry point.
FAQ
Why is OpenAI asking Mac users to update their apps?
Due to a cyberattack targeting the Axios software library, which led to potential access to the company’s code-signing pipelines. As a precaution, the company is revoking old authentication certificates, necessitating an immediate app update.
When will older versions of the apps stop working?
Older versions will stop working completely on May 8, the scheduled date for revoking old digital authentication certificates in coordination with Apple’s macOS security system.
Was user data stolen as a result of this breach?
To date, the company has found no evidence proving actual data exfiltration or theft, but it is handling the matter with extreme caution by assuming potential data compromise to prevent future harm.
What specific applications were affected by this attack?
Affected applications include ChatGPT Desktop, Codex, the Codex CLI, and Atlas for macOS.
