Codex 'Auto-Review' Agent Runs Malware
OpenAI's Codex "Approve-for-me" agent approved the execution of a malicious NPM install command with elevated privileges after a prompt injection hidden in a GitHub issue comment compromised the primary Codex agent. The …