Frequency
1
occurrences
First Seen
May 27, 2026
Last Seen
May 27, 2026
Related Threat Clusters
-
Malicious Codex Tool Steals OpenAI Tokens from Developers
A malicious npm package named 'codexui-android' has been discovered, which masquerades as a legitimate remote UI for OpenAI Codex. This tool, downloaded approximately 27,000 times weekly, has been silently exfiltrating…
12 articles · Updated May 29, 2026
Recent Intelligence Reports
- Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens — Aikido.Dev · May 27, 2026