Charlie Eriksen

mentions 2 type Person feed RSS

// recent coverage 2 mentions

20:54

2026-06-03

thenextweb.com

ai-tools

A popular OpenAI Codex tool with 29,000 weekly downloads has been quietly stealing developer tokens for a month

A popular npm package for OpenAI Codex with 29,000 weekly downloads has been stealing developer authentication tokens for a month. The same credential-theft chain also ran through two Android apps wit…

14:51

2026-05-29

letsdatascience.com

ai-tools

Codex UI Package Steals OpenAI Authentication Tokens

A malicious npm package named codexui-android, which amassed roughly 27,000 weekly downloads, secretly exfiltrated OpenAI Codex authentication tokens by sending the contents of users' auth.json files …

// co-occurs with top 7 entities

OpenAI Codex 2 Aikido Security 2 codexui-android 2 npm 1 Google Play 1 Cybernews 1 ITSecurityNews 1