Official Codex app installation command resolves to an unrelated third-party app

Documentation
, ,
1

The Windows Codex app documentation at docs/windows/windows-app recommends the following command:

winget install Codex -s msstore

This command does not resolve to an official OpenAI application. Instead, WinGet selects an unrelated Microsoft Store app called “Codex - QR Reader & Generator,” published by IYIA:

Found Codex - QR Reader & Generator [9NBLGGH5M02G] Version Unknown
This package is provided through Microsoft Store. WinGet may need to acquire the package from Microsoft Store on behalf of the current user.

Agreements for Codex - QR Reader & Generator [9NBLGGH5M02G] Version Unknown
Version: Unknown
Publisher: IYIA
Publisher Url: REDACTED
Publisher Support Url: REDACTED
License: REDACTED
Privacy Url: REDACTED
Copyright: REDACTED

Steps to reproduce:

  1. Open PowerShell on Windows.
  2. Run:

powershell winget install Codex -s msstore

  1. WinGet selects Microsoft Store product 9NBLGGH5M02G, an unrelated QR reader published by IYIA.

Expected result:

The command referenced in OpenAI’s official documentation should install the official OpenAI Windows application.

Actual result:

The command offers to install an unrelated third-party application.

This is also a potential security issue. A user may trust a command copied directly from OpenAI’s official documentation and accept the installation without realizing that WinGet selected software from an unrelated publisher.

2 Likes