Security News OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack TheHackerNews Daniel Bender 01 Jun 2026 Share Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access.