URL has been copied successfully!
27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens


Tags: , ,

A malicious Codex UI npm package with 27,000 weekly downloads was caught exfiltrating OpenAI refresh tokens, exposing developers to account takeover risks.

First seen on hackread.com

Jump to article: hackread.com/codex-ui-tool-secretly-stole-openai-refresh-tokens/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. 2025 Year of Browser Bugs Recap:
  2. Security for AI: How Shadow AI, Platform Risks, and Data Leakage Leave Your Organization Exposed
  3. Top 5 real-world AI security threats revealed in 2025
  4. The AI Supply Chain is Actually an API Supply Chain: Lessons from the LiteLLM Breach