Backdooring the next release of Codex through GitHub Action pipeline exploit chaining

Researchers at Depi discovered a vulnerability in OpenAI's Codex coding agent that allowed them to exploit a GitHub Actions publishing pipeline. By combining prompt injection, a sandbox escape, and CoreCLR memory reading, the security team gained control over the official npm package release process. Open article →