Sextant (sxt) binary for linux/arm64
OpenSSF/OSV advisory MAL-2026-12043 confirms this npm version as malicious.
Package ships native binary artifacts.