Frequency
1
occurrences
First Seen
May 29, 2026
Last Seen
May 29, 2026
Related Threat Clusters
-
Malicious Codex Tool Steals OpenAI Tokens from Developers
A malicious npm package named 'codexui-android' has been discovered, which masquerades as a legitimate remote UI for OpenAI Codex. This tool, downloaded approximately 27,000 times weekly, has been silently exfiltrating…
12 articles · Updated May 29, 2026
Recent Intelligence Reports
- OpenAI credential-stealing malware found hidden inside popular Codex tool — Cybernews · May 29, 2026