Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens

A malicious npm package (codexui-android) published with active development and wide adoption contained top-level code that reads users' Codex auth.json and XOR-encrypts and POSTs the entire authentication blob (access_token, refresh_token, id_token, account ID) to sentry.anyclaw.store on every startup; an Android app on Google Play bootstraps and installs the package inside a Termux/PRoot userland so devices automatically pull and run the malicious package (exfiltration present since [email protected]).