Researchers Say Codex Flaw Put npm Releases at Risk

Depi says OpenAI fixed a chain linking prompt injection, a sandbox escape and publishing credentials. Its disclosure does not report a malicious npm release reaching users.

Loading this article…