Phantom Labs uncovers a serious flaw in OpenAI's Codex, allowing potential theft of GitHub tokens. OpenAI has since released fixes.