--- title: Legitimate-Looking Codex Remote UI Secretly Steals Your... description: A polished npm package called `codexui-android` — a remote web UI for OpenAI Codex with 27,000 weekly downloads and an active GitHub repo — was silently... canonical: https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens | daily.dev og:description: A polished npm package called `codexui-android` — a remote web UI for OpenAI Codex with 27,000 weekly downloads and an active GitHub repo — was silently... og:url: https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp og:image: https://api.daily.dev/og/posts/a6l6swlyP.png og:image:alt: Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens **[Aikido Security](https://daily.dev/sources/aikido-security)** · 5 min read · 1 upvotes · 0 comments ## Summary A polished npm package called `codexui-android` — a remote web UI for OpenAI Codex with 27,000 weekly downloads and an active GitHub repo — was silently exfiltrating users' Codex authentication tokens (access, refresh, and ID tokens) to an attacker-controlled server for over a month. The malicious code was injected only into the published npm artifact, not the GitHub source, making it invisible to source audits. It runs unconditionally on startup, reads `~/.codex/auth.json`, and POSTs the full OAuth blob to `sentry.anyclaw.store` — a domain designed to mimic legitimate Sentry telemetry traffic. The same author also ships an Android app on Google Play that automatically pulls and runs the malicious npm package on launch, extending the attack surface to mobile users. The threat actor built a genuinely useful tool to establish credibility before weaponizing it, representing a sophisticated evolution of supply chain attacks targeting AI developer tooling. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Popular Codex npm package stole developer tokens for a month](https://daily.dev/posts/popular-codex-npm-package-stole-developer-tokens-for-a-month-szppthxmu) · The Next Web · 1 upvotes · 1 comments - [Attack targeting OpenAI Codex users exposes AI software supply chain risks](https://daily.dev/posts/attack-targeting-openai-codex-users-exposes-ai-software-supply-chain-risks-x1yygxvy1) · CSO Online · 0 upvotes · 0 comments - [Coding Agent Horror Stories: The 29 Million Secret Problem](https://daily.dev/posts/coding-agent-horror-stories-the-29-million-secret-problem-3aivjwf10) · Docker · 28 upvotes · 5 comments - [Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools](https://daily.dev/posts/malicious-npm-package-uses-hidden-prompt-and-script-to-evade-ai-security-tools-l2zvpwytq) · The Hacker News · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#npm](https://daily.dev/tags/npm), [#openai-codex](https://daily.dev/tags/openai-codex) [View this post on daily.dev](https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens","url":"https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp"},"datePublished":"2026-05-27T21:20:52.437Z","dateModified":"2026-05-27T23:50:22.879Z","description":"A polished npm package called `codexui-android` — a remote web UI for OpenAI Codex with 27,000 weekly downloads and an active GitHub repo — was silently...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5608aeaab15965c12df614f90aa03b67?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5608aeaab15965c12df614f90aa03b67?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Aikido Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Aikido Security","logo":"https://media.daily.dev/image/upload/s--vJDqDYv_--/f_auto,q_auto/v1774959928/logos/aikido-security?_a=BAMAMiWQ0","url":"https://daily.dev/sources/aikido-security"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/legitimate-looking-codex-remote-ui-secretly-steals-your-ai-tokens-a6l6swlyp","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,npm,openai-codex","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Aikido Security","item":"https://daily.dev/sources/aikido-security"},{"@type":"ListItem","position":3,"name":"Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens"}]} ```