OpenAI Patches Codex Flaw That Exposed npm Packages to Supply Chain Risks
November 12, 2026
Security researchers at Depi revealed a chained vulnerability in OpenAI's Codex that exposed npm publishing credentials. OpenAI patched the flaw prior to any malicious package releases.
Electrum Issues Critical Wallet Update After Malicious Server Exploit
October 25, 2026
Electrum developers released an urgent security update after discovering a vulnerability that allowed malicious servers to alter transaction addresses and artificially inflate network fees.