MAL-2026-11997

Dashboard / Malicious Package / MAL-2026-11997

MAL-2026-11997

Summary: Malicious code in sextant-cli-darwin-arm64 (npm)

Details: Source: amazon-inspector (23978b08a7e3f8af97d2c8060e7fc3aca9a18d9f3435163a9d3ab97ac0b9d4d0) Package ships a darwin/arm64 Go binary that opens an outbound WebSocket to a hardcoded author-controlled relay at wss://relay.sextant.top and links a PTY library (github.com/creack/pty) with a WebSocket client (github.com/coder/websocket), implementing the network-driven pseudo-terminal remote-shell pattern that yields full-host code execution to the operator of that relay. The binary additionally binds listeners on 0.0.0.0:7280, 0.0.0.0:7281, and 0.0.0.0:9000 (a 'ws://%s:%s%s' format string is present), exposing the PTY/WebSocket surface to the local network rather than loopback. Embedded strings include a regex specifically matching Anthropic API keys ('sk-ant-[a-z0-9]+-[A-Za-z0-9_-]{40,}') and references to CLAUDE_CONFIG_DIR and ~/.claude paths, allowing extraction of the installer's Anthropic credentials, which are then reachable via the same relay channel. A separate POST to https://relay.sextant.top/install combined with a call to http://ip-api.com/json/?fields=status,message,country,countryCode,city,timezone,query reports installer geolocation and host identity to the author. The npm-facing metadata describes the package only as 'Sextant (sxt) binary for darwin/arm64', while the license field points to a GitHub repository named 'claude_control' — the shipped functionality (remote control of Claude Code / Gemini CLI sessions plus API-key exfiltration) is not disclosed in the package description or README.

References: https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc24, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc31, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc14, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc19, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc23, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc25, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc35, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc17, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc16, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc21, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc15, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc20, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc28, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc13, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc6, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc34, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc27, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc33, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc5, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc9, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc29, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc12, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc8, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc30, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc32, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc22, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc26, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc7, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc11, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc10, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc37, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc36, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc39, https://www.npmjs.com/package/sextant-cli-darwin-arm64/v/0.0.1-rc38