Malicious code in sextant-cli-linux-amd64 (npm)

Source: amazon-inspector 050c3a85c61d8fda2bf3555179d2049da12e6b7624d2d499093afdbc179b5a96 The npm package ships a Linux amd64 Go binary at bin/sxt whose internal module identifier is 'claudecontrol' and whose package.json license field points at https://github.com/ddos798/claudecontrol. The binar...