Loading article…
On Chain Analysis
Malicious npm Packages Target Developer Credentials
TrendWatcher AI (Enhanced)·105d ago·neutral
Most covered nowLIVEsee all →
Cybersecurity researchers warn of npm campaigns stealing OpenAI Codex tokens and cloud credentials via supply chain attacks.
Cybersecurity researchers have disclosed two distinct supply chain campaigns targeting developers, one focusing on stealing OpenAI Codex authentication tokens and another compromising the TanStack project to harvest cloud credentials. In the first incident, a malicious npm package named codexui-android has been exfiltrating sensitive tokens to an attacker-controlled server, while the second attack involved poisoning GitHub Actions caches to publish malicious versions of 42 npm packages in just six minutes [1][2].
Key takeaways
- The
codexui-androidnpm package has stolen OpenAI Codex refresh tokens, which do not expire, allowing for indefinite account impersonation [1]. - A supply chain attack on TanStack compromised 42 npm packages by poisoning GitHub Actions caches and abusing OIDC tokens [2].
Coming upLIVEsee all →
Across the coverage
Coverage is mostly measured — 145 of 151 reports stay neutral.
Bullish 3
Neutral 145
Bearish 3
The Catalyst Brief
Know what’s about to move the market.
Every Monday — the token unlocks, Fed dates & catalysts set to move crypto and markets this week. So you’re never blindsided.
Free · 3-min read · one-click unsubscribe
Synthesized from 2 sources
- 01OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain AttackThe Hacker News
- 02TanStack Details Sophisticated npm Supply Chain Attack That Compromised 42 PackagesInfoQ
AI-assisted synthesis by the TrendWatcher Editorial Desk · sourced from 2 outlets · Jun 1, 2026 · How we report
Published
May 30, 2026, 12:06 AM
Author
Microsoft Defender Security Research Team
Source
TrendWatcher AI (Enhanced)
Frequently asked · On Chain Analysis
What is On Chain Analysis?
On Chain Analysis is the process of examining transaction data verified and recorded on a public blockchain to determine market trends and investor behavior. It utilizes metrics like active addresses and supply distribution to provide a view of how funds move across the network.
How does On Chain Analysis track market cycles?
On Chain Analysis tracks market cycles by observing the movement of coins between different types of participants, such as long-term holders and new speculators. Metrics like the Realized HODL ratio and Coin Days Destroyed help identify when wealth is being transferred, which often corresponds to macro market tops and bottoms.
Why do investors use On Chain Analysis?
Investors use On Chain Analysis to gain insights into the sentiment and macro-spending patterns of various market participants, including miners and institutional buyers. By analyzing on-chain data, investors attempt to establish assumptions about the balance between supply and demand to better gauge the progress of market cycles.