OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Summary: A malicious npm package called codexui-android, advertised as a remote web UI for OpenAI Codex and drawing over 29,000 weekly downloads, has been exfiltrating Codex authentication tokens to an attacker-controlled server at sentry.anyclaw[.]store since version 0.1.82, roughly a month after the package was first published. The package reads the ~/.codex/auth.json file and captures access_token, refresh_token, id_token, and account ID, and the same exfiltration chain appears in two Android apps from developer BrutalStrike with more than 50,000 and 10,000 downloads respectively.
Bottom line: The stolen refresh_token does not expire, so an attacker holding it can silently impersonate the affected Codex account indefinitely, and the package remains available for download while the author claims to be investigating.

Read the original at The Hacker News ↗

Topics: Supply Chain & AppSec
Related: Kitesurf is now open source Cyber Risks · Nov 13, 2026
Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026
ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026