OpenSSF/OSV advisory MAL-2026-12029 confirms this npm version as malicious. The npm package ships a Linux amd64 Go binary at bin/sxt whose internal module identifier is 'claude_control' and whose package.json license field points at https://github.com/ddos798/claude_control. The binary statically links github.com/creack/pty (pseudo-terminal spawner), github.com/coder/websocket, and the full github.com/pion/webrtc/v4 stack (datachannel + ICE/DTLS/STUN/TURN), and connects to a hardcoded relay...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in sextant-cli-linux-amd64 (npm)
Details
The npm package ships a Linux amd64 Go binary at bin/sxt whose internal module identifier is 'claude_control' and whose package.json license field points at https://github.com/ddos798/claude_control. The binary statically links github.com/creack/pty (pseudo-terminal spawner), github.com/coder/websocket, and the full github.com/pion/webrtc/v4 stack (datachannel + ICE/DTLS/STUN/TURN), and connects to a hardcoded relay at https://relay.sextant.top/install. The composition — WebSocket signaling to a fixed relay, WebRTC data channel, and PTY spawn — implements a remote-controlled interactive shell on the installer's host: a remote peer that reaches the relay can drive a full TTY on the installer's machine. The binary also references http://ip-api.com/json/, a public IP-geolocation endpoint, used to fingerprint the host at agent startup. The npm package name (sextant-cli-linux-amd64) does not reference 'claude_control' or 'ddos798'; the shipped payload is the claude_control agent delivered via npm's platform-specific binary distribution mechanism.
Decision reason
OpenSSF Malicious Packages via OSV confirms sextant-cli-linux-amd64@0.0.1-rc32 as malicious (MAL-2026-12029): Malicious code in sextant-cli-linux-amd64 (npm)