27,000-Download Codex UI Tool Secretly Stole OpenAI Refresh Tokens
2026-05-31T20:51:43Z•2606d188e473a98d69e8dff4855916db919745ebc0da2d77af953bd6cd98c0e1
AnthropicClaudeGeminiNimbus ManticoreOpenAISEO-poisoningZoomaccount-takeovercredential-theftdeveloper-targetingfileless-malwareinfostealermalicious-packagemalware-distributionnation-statenpmrefresh-tokenssupply-chaintoken-thefttrojanized-installer
What happened
Multiple recent campaigns target developers and AI tool users via supply-chain and SEO-poisoning tactics. A malicious 'Codex UI' npm package (≈27k weekly downloads) was found exfiltrating OpenAI refresh tokens, enabling account takeover. Parallel campaigns use fake Anthropic/Gemini/Claude installer sites and trojanized Zoom installers (attributed to Iran-linked Nimbus Manticore) to deliver fileless infostealers and steal browser credentials. These incidents highlight risks to developer machines, CI systems, and cloud/AI accounts from malicious packages, trojanized installers, and SEO-poisoned/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 2606d188e473a98d69e8dff4855916db919745ebc0da2d77af953bd6cd98c0e1
- Enrichment time
- 2026-05-31T20:51:43Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.