Malicious code in sextant-cli-linux-arm64 (npm)

Source: amazon-inspector cb7ff319c462df37238c84a4d224ed57bb0020dba780f8b41b44705e479744b1 The tarball ships a linux/arm64 Go executable sxt as its sole payload. The binary embeds a PTY-spawning library github.com/creack/pty together with a WebSocket client github.com/coder/websocket and a full...