Prebuilt ccfly guided-install binary for darwin/arm64.
OpenSSF/OSV advisory MAL-2026-12084 confirms this npm version as malicious.
Package ships native binary artifacts.