OpenAI’s Mac apps need updates thanks to the Axios hack

OpenAI disclosed that a supply-chain attack tied to a North Korean-linked group (UNC1069) injected malicious code into Axios via a compromised maintainer; the malicious package executed in a GitHub signing workflow used by OpenAI for macOS apps, prompting OpenAI to treat a signing certificate as compromised, revoke and rotate it, and warn users to update affected macOS applications.