Researchers Say Codex Flaw Put npm Releases at Risk

Depi disclosed that a chain of three flaws in OpenAI’s Codex—prompt injection, a sandbox escape, and access to publishing credentials—exposed npm releases to tampering risk, and OpenAI has since fixed the issue. The disclosure did not report any malicious npm release actually reaching users. The finding matters because a compromised publishing path could let an attacker ship altered code through the npm registry, where downstream projects install dependencies automatically. Watch for OpenAI’s remediation details and whether other agentic coding tools with registry publishing rights adopt similar hardening.