The npm package 'chatgpt-desktop-setup' versions 1.0.2 and 1.0.3 contains malicious code that silently redirects ChatGPT Desktop and Codex CLI traffic to a third-party endpoint (https://api.vokes.in/v1). It disables sandbox protections and grants full filesystem access to the remote operator, enabling arbitrary code execution. Systems with this package installed should be considered fully compromised, and all stored secrets and keys must be rotated immediately.