Issue Station
Sign In
Tools hereToolbox

codex - 💡(How to fix) Fix Windows Defender severe detection on bundled Codex Browser Use plugin [1 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
openai/codex#20322•Fetched 2026-05-01 05:43:59
View on GitHub
Comments
1
Participants
2
Timeline
6
Reactions
0
Author
gotpcproblemsgotpcproblems
Participants
github-actions[bot]github-actions[bot]gotpcproblemsgotpcproblems
Timeline (top)
labeled ×4closed ×1commented ×1
RAW_BUFFERClick to expand / collapse

Product: OpenAI Codex Desktop for Windows Date/time: 2026-04-29 around 9:25 PM America/Phoenix Windows Defender detection: Trojan:JS/DrillApp.A!MTB Alert level: Severe Status: Active initially; Defender remediation later reported ActionSuccess=True

Affected file: C:\Users\Brian.codex\tmp\bundled-marketplaces\openai-bundled\plugins\browser-use\scripts\browser-client.mjs

Additional remediated copies reported by Defender: C:\Users\Brian.codex\plugins\cache\openai-bundled\browser-use\0.1.0-alpha1\scripts\browser-client.mjs C:\Users\Brian.codex\tmp\arg0\codex-arg0vLLBtz\plugins\openai-bundled\plugins\browser-use\scripts\browser-client.mjs

Defender details: ThreatID: 2147964955 Detection times:

  • 2026-04-29 21:25:44
  • 2026-04-29 21:26:01 ActionSuccess: True CleaningActionID: 2 ThreatStatusID: 3 ProcessName shown by Defender: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Context: The file appears to be part of the bundled OpenAI Browser Use plugin used by Codex Desktop for browser automation. The user and assistant stopped using the plugin after the alert. Please confirm whether this is a known false positive, a compromised bundle/cache, or something requiring remediation.

Requested action: Please advise whether to delete the Codex plugin cache, reinstall Codex Desktop, collect logs, or submit the file/hash through a specific OpenAI security channel.

extent analysis

TL;DR

Delete the Codex plugin cache and verify if the issue persists to determine the next course of action.

Guidance

  • Investigate the browser-client.mjs file to understand its purpose and functionality within the OpenAI Browser Use plugin.
  • Check for any similar reports or known issues related to the Trojan:JS/DrillApp.A!MTB detection in the OpenAI community or forums.
  • Consider submitting the file/hash through a specific OpenAI security channel for further analysis and verification.
  • Reinstalling Codex Desktop may be necessary if the issue is related to a compromised bundle or cache.

Notes

The fact that Windows Defender reported ActionSuccess=True suggests that the threat has been mitigated, but it's essential to verify that the issue is fully resolved.

Recommendation

Apply workaround: Delete the Codex plugin cache and monitor for any further issues, as this is a non-invasive step that can help determine if the problem is related to a compromised cache.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#api#ssr#installation#tensor shape#autograd error

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

codex - 💡(How to fix) Fix Windows Defender severe detection on bundled Codex Browser Use plugin [1 comments, 2 participants]