[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCzCggfAPNaw1DD5mIV2jpABvm1wSOBTCwje7tnFXC-4":3},{"article":4,"iocs":55,"watch_terms":65,"solutions":66,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"07854d12-9c86-4aa1-8cf5-6a280691c0da","OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack","openai-codex-authentication-tokens-stolen-in-codexui-android-npm-supply-chain-at-444c55","Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for OpenAI Codex, attracting over 29,000 weekly downloads. The package is still available for download from the repository. What","A malicious supply chain attack targeted developers using OpenAI Codex through a compromised npm package named codexui-android. The package, with over 29,000 weekly downloads, exfiltrated Codex authentication tokens to an attacker-controlled server. The same exfiltration chain was found in two Android apps.","codexui-android npm package stole OpenAI Codex authentication tokens from developers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F06\u002Fopenai-codex-authentication-tokens.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEg4veBAmEJHF2nXN_nIgXeWxVSxlTDBc6uWiLwVCYNUqGMF9ZtPre3zF_CXmGnAxX2rbqfwgm_Au0tXvYwv1oTGim1STiGCeVOyMXglUTd-3LeJEN3q718Fdlck9mbQ6aUUYP0NM9S7bakZ4_XF5HHYH-cz2QmKBlge6xNMxbbEjDjZQ4wd1maPKnjgKrsu\u002Fs1600\u002Fcodex.png","2026-06-01T09:31:15+00:00","2026-06-01T12:00:12.995405+00:00",9,[17,20,22,25,28,30],{"name":18,"type":19},"OpenAI Codex","product",{"name":21,"type":19},"codexui-android",{"name":23,"type":24},"OpenAI","vendor",{"name":26,"type":27},"npm","technology",{"name":29,"type":24},"GitHub",{"name":31,"type":19},"ChatGPT","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":32,"icon":34,"name":35,"slug":36},null,"Supply Chain","supply-chain",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[56,60,62],{"type":57,"value":58,"context":59},"domain","sentry.anyclaw[.]store","Attacker-controlled server masquerading as Sentry for exfiltrating Codex authentication tokens",{"type":49,"value":21,"context":61},"Malicious npm package",{"type":49,"value":63,"context":64},"OpenClaw Codex Claude AI Agent","Malicious Android application",[23,29,18],{"controls":67,"vendors":150},[68,97,123],{"slug":69,"name":70,"problem":71,"products":72},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[73,81,89],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"slug":98,"name":99,"problem":100,"products":101},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[102,107,115],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":103,"product_name":104,"url":105,"description":106},"cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":124,"name":125,"problem":126,"products":127},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[128,134,142],{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":129,"product_name":130,"url":132,"description":133},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png","https:\u002F\u002Fsocket.dev\u002F","Detects and blocks malicious and risky packages in npm, PyPI and other ecosystems.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[],{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":162},"malicious-npm-package-steals-openai-authentication-tokens","Malicious npm Package Steals OpenAI Authentication Tokens","A compromised npm package named codexui-android infiltrated the software supply chain, stealing OpenAI Codex authentication tokens from over 29,000 weekly users. The malicious package exfiltrated sensitive credentials to attacker-controlled servers, demonstrating how supply chain attacks can compromise developer tools and steal valuable API access tokens. This incident highlights the critical need for package verification, dependency monitoring, and secure token management in development environments.",[156,157,158,159,160,161],"CIS Control 2.7","CIS Control 16.7","NIST SP 800-161","NIST AC-2","NIST IA-5","OWASP SCVS",{}]