Full Breakdown
OpenAI Revokes macOS App Certificate Following Supply Chain Attack
4/13/2026, 11:04:47 AM
Overview of the Incident
OpenAI has announced the revocation of its macOS app signing certificate due to a supply chain attack that compromised the Axios npm package. This incident, which was discovered on March 31, 2026, involved the malicious injection of a dependency that could potentially allow unauthorized code to appear as legitimate OpenAI software. The company has emphasized that no user data or internal systems were compromised during this event.
Details of the Attack
The attack was attributed to a North Korean hacking group known as UNC1069, which hijacked the npm account of the Axios package maintainer to distribute malicious versions of the library. These versions contained a backdoor named WAVESHAPER.V2, capable of infecting systems across multiple platforms, including Windows, macOS, and Linux. OpenAI's automated workflow for signing its macOS applications inadvertently downloaded this compromised version of Axios, which had access to the signing certificate used for its applications, including ChatGPT Desktop and Codex.
Remediation Efforts
In response to the incident, OpenAI is collaborating with Apple to ensure that software signed with the compromised certificate cannot be notarized. The company has set a deadline of May 8, 2026, for users to update their applications to versions signed with a new certificate. After this date, older versions will be blocked by macOS security protections, preventing them from being launched or downloaded. OpenAI has stated, “We have stopped new software notarizations using the old certificate, so new software signed with the old certificate by an unauthorized third-party would be blocked by default by macOS security protections unless a user explicitly bypasses them.”
Broader Implications
This incident is part of a larger trend of supply chain attacks affecting the open-source ecosystem. In March 2026, another significant attack targeted the Trivy vulnerability scanner, leading to cascading impacts across various software libraries. Cybersecurity experts have warned that these attacks could lead to further compromises, including ransomware and extortion events. Google has indicated that "hundreds of thousands of stolen secrets" may be circulating as a result of these incidents, heightening the risk of additional supply chain vulnerabilities.
Criticism & Opposition
Critics have highlighted the inherent risks associated with the reliance on open-source libraries, emphasizing the need for developers to adopt stricter verification processes. Mark Lechner, Chief Information Security Officer at Docker, noted, “Trust was assumed where it should have been verified,” urging organizations to replace implicit trust with explicit verification in their software development practices.
Official Statements & Responses
OpenAI has reassured users that it found no evidence of data exfiltration or system compromise. The company stated, “Out of an abundance of caution, we are taking steps to protect the process that certifies our macOS applications are legitimate OpenAI apps.” The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has also added the incident to its Known Exploited Vulnerabilities catalog, mandating mitigations by April 9, 2026.
What's Next
As OpenAI implements its new security measures, users are urged to update their applications promptly to avoid losing access. The company’s proactive steps aim to mitigate potential risks and enhance the security of its software development pipeline in light of recent supply chain vulnerabilities.
