A well-liked software program device utilized by 1000’s of cellular builders has been discovered stealing authentication tokens. On 27 Could 2026, Aikido Safety shared analysis with Hackread.com a couple of malicious npm package deal referred to as codexui-android<\/code>. <\/p>\n

For context, it’s a extremely fashionable distant net person interface for OpenAI Codex, a man-made intelligence (AI) mannequin that writes code, gathering roughly 27,000 weekly downloads.<\/p>\n

Aikido Safety\u2019s researcher, Charlie Eriksen, found that this package deal ran a provide chain assault final month to steal person information.<\/p>\n

Hiding in Plain Sight<\/strong><\/h3>\nCuriously, the attackers didn\u2019t use customary tips like typosquatting<\/a> or account hijacking; as an alternative, they developed a genuinely useful gizmo. This was likely finished to kind an actual person base earlier than weaponising it. Furthermore, the malicious code doesn\u2019t exist within the public GitHub repository, and solely seems within the printed npm package deal<\/a>. This implies a typical supply code audit will surely miss it.<\/p>\n The assault triggers instantly at module load. The very first line of dist-cli\/index.js imports a hidden script named chunk-PUR7OUAG.js<\/code>. It rapidly checks for native credentials. If discovered, a knowledge exfiltration routine is launched to steal access_token, id_token<\/code>, account ID, and the refresh_token<\/code> from the auth.json<\/code> file. Extra problematic is {that a} refresh_token<\/code> doesn\u2019t expire; therefore, the attackers can impersonate the sufferer indefinitely.<\/p>\n To cover the community visitors, the code sends the stolen information to a server endpoint named sentry.anyclawstore. This was chosen deliberately to mix in with regular Sentry error-reporting telemetry. Contained in the hidden supply map, the creator even left a transparent remark: \u201cShip tokens to our startlog endpoint (at all times)\u201d.<\/p>\n Concentrating on Cell Gadgets<\/strong><\/h3>\nResearchers famous within the weblog publish<\/a> that this menace actor additionally targets Android cellular units. The creator printed apps on the Google Play Retailer below the developer identification BrutalStrike, who additionally owns a professional cellular recreation with over 5 million downloads. <\/p>\n Two particular apps, a paid productiveness app referred to as codex.app and one other referred to as \u201cOpenClaw Codex Claude AI Agent\u201d, include the identical malicious infrastructure.<\/p>\n \n<\/a>Supply: Aikido Safety<\/figcaption><\/figure>\n<\/div>\nThe Android apps<\/a> simply cross Google\u2019s pre-publish safety scans as a result of the preliminary 26 MB APK file appears utterly clear. As soon as put in, the app extracts a Termux-derived Linux userland into personal storage and launches Node.js utilizing PRoot. It then runs a command to put in the most recent model of the npm package deal: pnpm add codexui-android@newest<\/code>. The exfiltration has been lively since model [email\u00a0protected]<\/a><\/code>.<\/p>\n When Eriksen confronted the creator, they briefly posted a remark claiming they misplaced entry to their npm account. They deleted it shortly after, changing it with a company assertion denying any credential theft. <\/p>\n \n<\/a><\/figure>\n<\/div>\nAs of at present, the malicious software program package deal and the apps are nonetheless reside on-line.<\/p>\n \u201cAI developer tooling is turning into a high-value goal exactly as a result of the tokens are highly effective and long-lived\u2026 a menace actor invested actual effort into constructing a reputable, helpful venture to make use of as cowl. The legitimacy is the assault vector. As AI instruments proliferate and builders attain for productiveness shortcuts, count on extra of this,\u201d researchers concluded.<\/p>\n \n\t\t\t<\/div>\n <\/script> \n <\/p>\n","protected":false},"excerpt":{"rendered":" A well-liked software program device utilized by 1000’s of cellular builders has been discovered stealing authentication tokens. On 27 Could 2026, Aikido Safety shared analysis with Hackread.com a couple of malicious npm package deal referred to as codexui-android. For context, it’s a extremely fashionable distant net person interface for OpenAI Codex, a man-made intelligence (AI) […]<\/p>\n","protected":false},"author":2,"featured_media":15304,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[9277,2516,82,4017,7084,3598,6356,509],"class_list":["post-15302","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-27000download","tag-codex","tag-openai","tag-refresh","tag-secretly","tag-stole","tag-tokens","tag-tool"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/15302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15302"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/15302\/revisions"}],"predecessor-version":[{"id":15303,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/15302\/revisions\/15303"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/15304"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}