Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

DARK SECRETS: Openai codex tool with over 29 000 downloads linked to malicious npm supply chain attack stealing authentication tokens | Vintage Vibes

Codex remote control in ChatGPT.
  • Researchers uncovered a malicious npm package posing as a Codex UI tool
  • Attackers exfiltrated Codex authentication tokens, including non‑expiring refresh tokens
  • Aikido Security also found two Android apps targeting Codex users

A newly discovered supply-chain attack on npm is targeting software developers using OpenAI Codex.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.