Frequency
2
occurrences
First Seen
May 29, 2026
Last Seen
May 29, 2026
Related Threat Clusters
-
Malicious Codex Tool Steals OpenAI Tokens from Developers
A malicious npm package named 'codexui-android' has been discovered, which masquerades as a legitimate remote UI for OpenAI Codex. This tool, downloaded approximately 27,000 times weekly, has been silently exfiltrating…
12 articles · Updated May 29, 2026
Recent Intelligence Reports
- Legitimate — Cybersecuritynews · May 29, 2026
- Fake Codex Remote UI Steals OpenAI Auth Tokens — Gbhackers · May 29, 2026