Product
codexui-android
- First Reported
- Jun 1, 2026
- Latest Reported
- Jun 1, 2026
Reported Context (1)
- Researchers uncovered a malicious supply chain campaign hiding in the npm package codexui-android, which secretly steals OpenAI Codex authentication tokens from developers and sends them to sentry.anyclaw[.]store. Malicious npm Package and Android Apps Found Stealing OpenAI Codex Tokens
People (2)
MITRE ATT&CK (2)
Vendors (2)
Products (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.