PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

aikido.dev | blog | #ai-security | #supply-chain | #malware | #credential-theft | #npm | #supply-chain-security | #openai-codex | #ai-tokens
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A useful OpenAI Codex remote UI stole users' long-lived auth tokens on every invocation, with malicious code present only in the npm package. Aikido warns legitimacy itself is becoming the attack vector.
Published
Collected

Related coverage

blog · jfrog.com
JFrog Names Nine Global Winners for Inaugural Software Supply Chain Excellence Awards
Discover the winners of the inaugural JFrog Software Supply Chain Excellence Awards, recognizing 9 global leaders managing and securing software for AI delivery at enterprise scale.
blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
Wiz attributes the cross-ecosystem campaign to TeamPCP: @antv npm packages, actions-cool/issues-helper GitHub Action, and a VS Code extension steal credentials and drop a GitHub-polled backdoor.
blog · wiz.io
Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malware
TeamPCP's 'Mini Shai Hulud' campaign trojanized SAP-related npm packages with preinstall scripts, later hitting intercom-client and lightning, harvesting Kubernetes, Vault, and cloud credentials.
vulnerability · about.gitlab.com
Pillow CVE-2026-112900: How to find and fix it with GitLab
Upgrade to Pillow 13.0.0, then use dependency scanning, code search, and GitLab Duo Agent Platform to patch every affected Python project in your groups.
incident · wiz.io
keyv and cacheable npm Package Hijacked in Supply Chain Attack
Wiz: keyv/cacheable packages were hijacked via a maintainer account; a Mini Shai-Hulud descendant hit 400+ packages, stealing credentials, AI configs and wallets; C2 via an Ethereum contract.
Back