OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach

OpenAI was impacted by the TanStack npm supply-chain compromise: two employee workstations were infected after installing tainted packages and attackers may have exfiltrated code signing certificates for iOS, macOS, and Windows. OpenAI is rotating and will revoke the compromised certificates (scheduled for June 12, 2026), has contained the incident, reports no core codebase or user-data leakage, and urges immediate updates to affected ChatGPT, Codex, and Atlas releases (macOS users require a manual update).