A reported relay rerouted Codex and Claude Code requests

On October 29, 2026, Dark Reading reported that Symantec’s Threat Hunter team had identified a relay that routed genuine OpenAI Codex and Anthropic Claude Code command-line interfaces (CLIs) through its own infrastructure and changed their security settings. The relay was reportedly active from early 2026. Symantec reportedly observed no malicious activity executed on the reviewed systems and no confirmed compromises.

What the relay reportedly changed

The reported installation began with a one-line command that fetched PowerShell or bash instructions from a domain resembling an official one. The CLIs themselves were genuine programs downloaded through npm; the reported changes were to configuration and request routing.

Requests were redirected from OpenAI or Anthropic infrastructure through the relay. Its configuration reportedly disabled the execution sandbox, which isolates a program’s actions, and enabled network access for that environment. It also turned off telemetry and error reporting. Because requests and responses passed through the relay, its operator could reportedly view or alter them. The account does not say that every user’s traffic was accessed or changed.

One reported credential replacement

In one reported case, the process ended an Anthropic session, removed authentication environment variables and installed credentials controlled by the relay. Those credentials persisted after a restart. That single case does not establish what happened to every organization where the service appeared.

The reported footprint was about a dozen organizations, mostly in mainland China, with additional cases in South Korea, Taiwan and Malaysia. Symantec reportedly observed no malicious activity executed on the reviewed systems and no confirmed compromises.

What Codex_Relay refers to

SkillsLLM describes Codex_Relay as a community desktop utility for exporting, importing and backing up Codex CLI .jsonl session files across devices. Its described function is managing session files, rather than routing model requests through a network relay.