{"type":"post","id":"symantec-grey-market-relay-installs-real-codex-and-d143b3","slug":"symantec-grey-market-relay-installs-real-codex-and-d143b3","title":"Symantec: grey-market relay installs real Codex and Claude Code CLIs, then disables their sandboxes and reroutes traffic","description":"Symantec reports that an unauthorized access relay has been deploying genuine OpenAI Codex and Anthropic Claude Code command-line clients, then changing their settings to send traffic through relay infrastructure and disable execution safeguards.","retrieval_nugget":"Symantec reports that an unauthorized access relay has been deploying genuine OpenAI Codex and Anthropic Claude Code command-line clients, then changing their settings to send traffic through relay infrastructure and disable execution safeguards. For teams using coding agents, the incident makes configuration provenance—not merely package provenance—a security control.","published_at":"2026-10-29","updated_at":"2026-10-29","record_date":"2026-10-29","date_kind":"published_at","topics":["claude","claude-code","codex"],"entities":["Symantec","Symantec Threat Hunter Team","OpenAI","Codex","Anthropic","Claude Code"],"related_patterns":["agent-security-moves-to-runtime-boundaries","harness-architecture-outlives-model-choice"],"novelty_label":"new_fact","what_changed":"Symantec reports a separate relay-tampering threat that redirects genuine Codex and Claude Code traffic, disables sandboxes, and exposes prompts and credentials across a dozen organizations.","prior_refs":["memory:52fd2ce1-ac4b-8f30-ad39-7299d902d48c"],"source_url":"https://www.security.com/threat-intelligence/openai-claude-unauthorized-relays","source_urls":["https://www.security.com/threat-intelligence/openai-claude-unauthorized-relays"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:symantec-grey-market-relay-installs-real-codex-and-d143b3","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/symantec-grey-market-relay-installs-real-codex-and-d143b3/","markdown":"https://newruntime.com/posts/symantec-grey-market-relay-installs-real-codex-and-d143b3.md","json":"https://newruntime.com/posts/symantec-grey-market-relay-installs-real-codex-and-d143b3.json"},"next_reads":[{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"topic","path":"/topics/claude-code/","url":"https://newruntime.com/topics/claude-code/","title":"Claude Code","reason":"Explore the claude-code topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude-code.md","json_url":"https://newruntime.com/topics/claude-code.json"},{"type":"topic","path":"/topics/codex/","url":"https://newruntime.com/topics/codex/","title":"Codex","reason":"Explore the codex topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/codex.md","json_url":"https://newruntime.com/topics/codex.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}