A polished Codex remote UI, the npm package codexui-android, has active development and thousands of weekly users. It has been quietly exfiltrating OpenAI auth tokens for the past month. Category: Vulnerabilities & Threats
Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens
calendar_today
May 27, 2026
domain
aikido-security