Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...
At the start of May, OpenAI released a playful feature inside its Codex desktop app for creating a virtual pet. This silly ...
The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.
Earlier this month, OpenAI updated ChatGPT’s mobile app to include remote access to Codex for Mac. Starting today, ChatGPT ...
Cybersecurity researchers at Aikido Security have uncovered a malicious supply chain attack targeting OpenAI Codex developers via the npm package “codexui-android”. While the associated GitHub ...
OpenAI has launched a significant enterprise-focused update for Codex, introducing six job-specific plugins for fields like data analytics, sales, and finance. The rollout includes a “Sites” feature ...
The tool gathered over 29,000 downloads before the malicious npm package was identified ...