OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-01 09:31 UTC
Importiert: 2026-06-08 13:07 UTC
Quelle-ID: thn_global
uid_hash: f7b88207fe3b1d7c7386cd8ad299b2113b2321da76966022f24291dc0fec718f

The Hacker News

Inhalt

Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-looking remote web UI.

The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for OpenAI Codex, attracting over 29,000 weekly downloads. The package is still available for download from the repository.

What

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste