OpenAI Codex CLI
Named by 5 kept items in this workspace.
3 items name it under tools and 2 under affected products.
Search every workspace for OpenAI Codex CLI. It matches the name as written, so it can find other things that share it.
The items that name it 5
Alternative, cost-saving backend AI assistant CLI for running Plamen audits (beta); pure-LLM phases fall back to WebSearch where MCPs unavailable
Agentic reviewer engine used to run the code review, pointed at a self-hosted model deployment instead of OpenAI's own endpoint.
CLI used to run the scan prompt against a local codebase (codex "$(curl -s .../prompt.md)")
coding agent the backdoored model was run through
Vulnerability chain abusing prompt injection through web.run leading to host-level command execution outside sandbox
All technologies in this workspace.