npm Supply Chain Attack Steals Codex Tokens
Jun 2, 2026 · 523 messages · 90 active members
@samtome shared news of a malicious npm package (29K downloads) exfiltrating OpenAI Codex auth tokens. Discussion turned to agent-driven risk: agents installing random repos could nuke setups. Recommended mitigations: Pe…
Read full digest →