The Hacker News

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

Malicious npm package targeting OpenAI Codex users steals authentication tokens

The tool gathered over 29,000 downloads before the malicious npm package was identified ...

ChatGPT for iOS and Android can now start Codex work on Windows

Earlier this month, OpenAI updated ChatGPT’s mobile app to include remote access to Codex for Mac. Starting today, ChatGPT ...
Android Authority

OpenAI Codex is coming to mobile so you can build apps on the go

Codex is now available via the ChatGPT apps on Android and iOS. The mobile apps support remote access to active Codex sessions, including code reviews, approvals, model switching, and task management.

OpenAI putting Codex inside ChatGPT, 6 new business plugins now available

OpenAI continues to push Codex beyond an agentic coding desktop app to a general productivity tool for everyone. As ...
The Next Web

A popular OpenAI Codex tool with 29,000 weekly downloads has been quietly stealing developer tokens for a month

The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.