Legitimate

Cybersecuritynews •Tushar Subhra Dutta • May 29, 2026

A polished, fully functional npm package has been caught secretly stealing OpenAI Codex authentication tokens from developers who trusted it. The package, named codexui-android, presented itself as a remote web UI for OpenAI Codex with no obvious signs of being malicious. It built a genuine user base, amassed 27,000 weekly downloads, and maintained an active […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious Codex Tool Steals OpenAI Tokens from Developers A malicious npm package named 'codexui-android' has been discovered, which masquerades as a legitimate remote UI for OpenAI Codex. This tool, downloaded approximately 27,000 times weekly, has been silently exfiltrating users' authentication tokens for the past month. The malware operates by pulling additional malicious code post-installation, allowing it to evade detection during Google Play's security scans. The stolen tokens include long-lived refresh tokens, which can grant attackers indefinite access to user accounts. The threat actor designed the tool to appear functional and useful, making it particularly dangerous. The malicious code sends stolen data disguised as legitimate telemetry to an attacker-controlled server. The tool remains available for download on Google Play as of today, raising ongoing security concerns for developers using OpenAI Codex. 9 sources 68

Extracted Entities

Legitimate

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Tools (2)