Unauthorized OpenAI Codex and Claude Code Relays Disable AI Sandboxes and Redirect Enterprise Data

A grey-market relay service is installing the real OpenAI Codex and Anthropic Claude Code tools on company computers and changing their settings so prompts, files and login tokens pass through servers the service controls, Cybersecurity News reports. The service has been active since at least early 2026 and disables the tools' AI sandboxes.