Researchers Say Codex Flaw Put npm Releases at Risk
November 11, 2026
1 min read
Depi says OpenAI fixed a chain linking prompt injection, a sandbox escape and publishing credentials. Its disclosure does not report a malicious npm release reaching users.... Read the full story at The Defiant