paperclipai vulnerabilities (npm)

2 vulnerabilities.

• paperclipai npm Paperclip: codex_local inherited ChatGPT/OpenAI-connected Gmail and was able to send real email GHSA-gqqj-85qm-8qhf 8.7 HighApril 16, 2026
• paperclipai npm Paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass CVE-2026-41679 Known exploitedPublic exploitFix available EPSS 31.7% 10.0 CriticalApril 10, 2026