OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

OpenAI is rotating potentially exposed macOS code-signing certificates after a GitHub Actions workflow executed a malicious Axios package during a recent supply chain attack. [...]

OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing the company to rotate

<!-- SC_OFF --><div class="md"><p>Reminder for Mac users: please update your OpenAI macOS apps by Friday, May 8.</p> <p>As we shared last month, we're rotating macOS signing

<a href="https://news.ycombinator.com/item?id=47871077">Comments</a>