That 'Official' Codex Download? It's a Malware Drop — Here's How I Confirmed It

You're at your desk, coffee in hand, ready to try OpenAI's new Codex CLI. You Google "Codex download," click the first result — looks official, clean branding, clean GitHub link. You've installed it in under two minutes. Except you didn't install Cod...