Sextant (sxt) binary for darwin/arm64
OpenSSF/OSV advisory MAL-2026-11997 confirms this npm version as malicious.
Package ships native binary artifacts.