OpenAI rotated macOS code‑signing certificate after Axios supply chain breach Malicious Axios 1.14.1 pulled into app‑signing workflow No evidence of data theft, but older app versions deprecated ...