Cybersecurity researchers have uncovered a supply chain campaign targeting developers of OpenAI Codex through a malicious npm package named codexui-android. Advertised as a legitimate remote web UI for OpenAI Codex on GitHub and npm, the package has already attracted over 29,000 weekly downloads, according to The Hacker News.
The attack exploits trust in open-source ecosystems. The package codexui-android remains available for download from the repository as of the report's publication. Its popularity suggests a significant potential exposure, though the exact number of compromised systems has not been disclosed.
Technical details indicate the package operates by stealing OpenAI authentication tokens from developer machines once installed. The attack vector leverages the package's install-time execution to exfiltrate credentials without raising immediate alarms. Specific indicators of compromise have not been publicly detailed by researchers.
As of now, no official mitigation or patch has been announced for the codexui-android package. Developers are advised to audit their dependencies and remove the malicious package if present. The repository maintainers have not yet responded to the disclosure.
The attack underscores the growing risk of software supply chain infiltrations targeting AI development tools. While attribution remains unclear, this campaign mirrors broader trends where malicious actors leverage high-demand developer utilities to harvest credentials at scale.