npm
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Activity reported by Dark ReadingGrey market relay service disables OpenAI Codex and Claude Code sandboxes and reroutes enterprise data
- Vulnerability reported by Help Net SecurityEmbedded browsers in five AI coding assistants allow code execution, file theft and address spoofing
- Activity reported by Cyber Security NewsDeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
Recent news
Grey market relay service disables OpenAI Codex and Claude Code sandboxes and reroutes enterprise data
Symantec's Threat Hunter Team identified a relay service active since at least early 2026 that has touched about a dozen organisations, mostly in mainland China. Users install the genuine Codex or Claude Code tool, then run a fileless setup script from a lookalike domain that rewrites the config to point at relay servers, stores the relay key as a user-level variable, sets sandbox mode to danger-full-access, enables network access and turns off telemetry. This is not a flaw in either product, but the relay can see every prompt, file and secret and could alter replies to run commands with the user's rights. No such abuse was observed.
Embedded browsers in five AI coding assistants allow code execution, file theft and address spoofing
Forever Security reported flaws in the embedded browsers of Cursor, GitHub Copilot, OpenAI Codex, VS Code and Claude Desktop, grouped under the name EMBRACE. Impacts include code execution in Cursor, address-bar spoofing in Copilot, and local file reads in Codex, VS Code and Claude Desktop, including SSH keys, .env files and npm tokens. Cursor and Copilot have been fixed, while Codex and VS Code were unpatched at publication.
DeceptiveDevelopment hackers steal developer credentials to poison GitHub repositories and software packages
ESET reports that DeceptiveDevelopment, a North Korea-aligned group, used stolen Git credentials, SSH keys and tokens between April and September 2026 to alter public and private repositories, often rewriting commit history. Poisoned code appeared on npm, the Go module mirror, Packagist, PyPI and browser extension marketplaces, and the group deployed the OmniStealer infostealer and the DEVPOPPER remote access trojan.