Codex generates code leaking Hugging Face and W&B credentials

JFPuget · x · 2026-08-19

While generating a remote sbatch script, Codex surfaced a security note warning that the generated code contained plaintext credentials for Hugging Face and Weights & Biases. The tool detected that these tokens were exposed during inspection and explicitly recommended that they be rotated immediately.

Original post →

More from Safety

Safety channel →