If you use the ChatGPT desktop app on your Mac, you’ll need to update it between now and June 12th. This is due to a security breach involving two OpenAI employee devices. As of June 2nd, the company is sending emails to users notifying them to accept updates if they are offered.
The reason is a bit complicated, but it stems from security issues surrounding the open source code the company uses. OpenAI emphasizes that it has found no evidence that user data was accessed or that its systems were compromised.
UTC On May 11, 2026, TanStack, a widely used open source library, was compromised as part of a widespread software supply chain attack known as Mini Shai-Hulud.
Two employee devices in our corporate environment were affected by this attack. Once we identified the malicious activity, we quickly investigated, contained, and took steps to protect our systems. As part of our investigation and response, we engaged a third-party digital forensics and incident response firm.
We observed activity consistent with published malware behavior, including unauthorized access and credential-focused theft activity, in a limited subset of internal source code repositories that were accessed by the two affected employees. We have confirmed that only limited credentials were successfully extracted from these code repositories and no other information or code was affected.
The problem is that the code includes functionality to sign certificates for OpenAI products. As a result, the company is revoking existing certificates and blocking apps signed with previous certificates from launching.
This will require a forced update of Mac apps, but the company says it will provide additional guidance to Mac users. For iOS or Windows apps, you don’t need to do anything.
You don’t need to do anything now. Just update when prompted.
Photo by Levart_Photographer on Unsplash
