The npm package @decoopus/chatgpt-setup version 1.0.2 contains malicious code that, when its CLI tool is run, modifies user configuration files to disable security controls and expands sandbox permissions to full filesystem access. It redirects the Codex model provider to an attacker-controlled gateway, allowing execution of instructions without user approval. This behavior is not documented in the README and only triggers via the documented CLI invocation. Systems with this package installed should be considered fully compromised, and all stored secrets and keys must be rotated immediately.