OpenSSF/OSV advisory MAL-2026-12029 confirms this npm version as malicious. The package ships a single Linux x64 Go binary at bin/sxt that connects to a hardcoded operator relay at wss://relay.sextant.top, negotiates a WebRTC peer connection (pion), spawns a local PTY (github.com/creack/pty) against /bin/sh or /bin/bash, and pipes bytes received from the remote peer into that shell...
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in sextant-cli-linux-amd64 (npm)
Details
The package ships a single Linux x64 Go binary at bin/sxt that connects to a hardcoded operator relay at wss://relay.sextant.top, negotiates a WebRTC peer connection (pion), spawns a local PTY (github.com/creack/pty) against /bin/sh or /bin/bash, and pipes bytes received from the remote peer into that shell. This is a full interactive remote-shell backdoor: any host that installs and runs the binary is under shell-level control of whoever operates the relay. The package.json license field points at github.com/ddos798/claude_control, matching the internal Go module path 'claude_control' embedded in the binary, tying the shipped binary to the operator-controlled project.
Decision reason
OpenSSF Malicious Packages via OSV confirms sextant-cli-linux-amd64@0.0.1-rc34 as malicious (MAL-2026-12029): Malicious code in sextant-cli-linux-amd64 (npm)