Malicious codexui-android npm package exfiltrates OpenAI Codex tokens via hidden code
Researchers at Aikido Security revealed that the popular npm package codexui-android, a remote UI for OpenAI Codex, silently reads developers' auth.json files and sends the OAuth token bundle to a malicious server. The covert exfiltration, present only in the published package, has affected thousands of users and enables indefinite token reuse.