OpenAI found a supply chain attack via compromised Axios tool affecting macOS app signing workflow. No data breach occurred; users must update apps as older versions lose support by May 8.