OpenAI's response to the Axios developer tool compromise
openai.com
April 23, 2026
5 min read
🔥🔥🔥🔥🔥
45/100
Summary
A security issue was identified involving the third-party developer tool Axios, prompting OpenAI to enhance protections for certifying macOS applications as legitimate. OpenAI found no evidence of user data access, system compromise, or intellectual property theft.
Key Takeaways
- OpenAI identified a security issue involving the Axios developer tool, which was compromised as part of a broader software supply chain attack on March 31, 2026.
- OpenAI is revoking and rotating its macOS code signing certificate as a precaution, despite finding no evidence of compromise to user data or software.
- Effective May 8, 2026, older versions of OpenAI's macOS desktop apps will no longer receive updates or support and may become non-functional.
- The incident was caused by a misconfiguration in the GitHub Actions workflow, which has since been addressed.