OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack (opens in new tab)

Covers 2 stories including Google API will keys keep working after you delete themCovered by TechRadar, AboutDFIR

Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for OpenAI Codex, attracting over 29,000 weekly downloads. The package is still available for download from the repository. What

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 2 articles

TechRadar

·

OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens

Discussed on Hacker News

AboutDFIR·

Covered in 2 articles

OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens

Infosec News Nuggets