Malicious code in @ccfly/setup-linux-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33138ee17148f975a7c0b34f5d6ee1a4ad082395b87872dc91de0778130b91c8 The tarball ships a single 6.9 MB linux/x64 Go executable at bin/ccfly-setup and no source. The binary links github.com/creack/pty PTY spawning and...

Malicious code in sextant-cli-linux-amd64 (npm)

Source: amazon-inspector 050c3a85c61d8fda2bf3555179d2049da12e6b7624d2d499093afdbc179b5a96 The npm package ships a Linux amd64 Go binary at bin/sxt whose internal module identifier is 'claudecontrol' and whose package.json license field points at https://github.com/ddos798/claudecontrol. The binar...