OpenAI: Axios Breach Didn't Compromise Data

OpenAI confirmed no user data was compromised in a North Korea-linked attack on developer tool Axios, which affected macOS app-signing workflows. The company is revoking certificates and requiring app updates.

OpenAI Identifies Third-Party Security Issue

OpenAI discovered a security issue with third-party tool Axios, compromised on March 31 in a North Korea-linked supply chain attack. No user data was accessed or systems compromised.

North Korean SW Supply Chain Attack

North Korean hackers compromised Axios JavaScript library through social engineering attack, impersonating company founder using AI-generated videos. Malicious code was inserted into npm repository, affecting nearly 100 million weekly downloads.