#developer-tooling

Malicious npm Package codexui-android Pulls 29K Weekly Downloads, Targets OpenAI Codex Tokens

A package posing as a remote web UI for OpenAI Codex is harvesting developer credentials. It's still live on npm and GitHub.