Storia in 3 fonti

Attack targeting OpenAI Codex users exposes AI software supply chain risks

The incident highlights how attackers can hide malicious code in software packages that differ from the source code available for review.

Raccontata da

thehackernews.com

infoworld.com

thenextweb.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

infoworld.comStai leggendo3 mesi fa

Attack targeting OpenAI Codex users exposes AI software supply chain risks

npm package exfiltrated OpenAI Codex tokens (27K downloads); stolen refresh_tokens grant permanent access. Supply chain vulnerability: malware injected in npm artifact, not public source. Enterprises need least-privilege credential controls and visibility for AI developer tools.

originale