@equansservices/codex is a malicious npm package that impersonates the legitimate @openai/codex package. During installation, it executes a postinstall script that downloads and runs attacker-controlled payloads without integrity verification, leading to arbitrary code execution on the installer's machine.