Sextant (sxt) binary for darwin/amd64
OpenSSF/OSV advisory MAL-2026-12028 confirms this npm version as malicious.
Package ships native binary artifacts.