Malicious code in sextant-cli-darwin-arm64 (npm)
The sextant-cli-darwin-arm64 npm package versions 0.0.1-rc5 through 0.0.1-rc37 contain malicious code. The package ships a Go binary for darwin/arm64 that establishes an outbound WebSocket connection to an attacker-controlled relay, enabling remote shell access with full host code execution. It also exposes local network listeners that allow remote access to this functionality. The binary attempts to extract Anthropic API keys and related credentials from the host and exfiltrates them to the attacker. Additionally, it reports the installer's geolocation and host identity to the attacker. The package metadata does not disclose these malicious capabilities.
AI Analysis
Technical Summary
The sextant-cli-darwin-arm64 npm package includes a malicious Go binary that opens an outbound WebSocket to a hardcoded attacker-controlled relay (wss://relay.sextant.top). This relay enables a network-driven pseudo-terminal remote shell, granting the attacker full code execution on the host. The binary also binds listeners on multiple local network ports (7280, 7281, 9000), exposing the remote shell interface beyond localhost. Embedded regex patterns target Anthropic API keys for extraction, and the binary exfiltrates these credentials along with installer geolocation and host identity data via HTTP POST requests to the relay and an IP geolocation service. The npm package description and README omit any mention of these malicious behaviors, misleading users about its true functionality.
Potential Impact
Successful installation and execution of this package results in full remote code execution on the affected host via a WebSocket-based remote shell controlled by the attacker. Sensitive credentials, specifically Anthropic API keys and configuration data, are extracted and exfiltrated to the attacker. The attacker's relay also receives geolocation and host identity information, potentially aiding further targeted attacks or reconnaissance. The exposure of the remote shell interface on local network interfaces increases the attack surface by allowing other devices on the local network to connect to the malicious service.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately uninstall the affected versions of sextant-cli-darwin-arm64 and avoid installing this package. Since the malicious code is embedded in the binary, replacing the package with a clean, verified version (if available) or an alternative tool is recommended. Monitor for any unauthorized network connections to wss://relay.sextant.top or local ports 7280, 7281, and 9000. Review and rotate any potentially compromised Anthropic API keys and related credentials. Patch status is not yet confirmed — check the vendor advisory or trusted security sources for updates.
Malicious code in sextant-cli-darwin-arm64 (npm)
Description
The sextant-cli-darwin-arm64 npm package versions 0.0.1-rc5 through 0.0.1-rc37 contain malicious code. The package ships a Go binary for darwin/arm64 that establishes an outbound WebSocket connection to an attacker-controlled relay, enabling remote shell access with full host code execution. It also exposes local network listeners that allow remote access to this functionality. The binary attempts to extract Anthropic API keys and related credentials from the host and exfiltrates them to the attacker. Additionally, it reports the installer's geolocation and host identity to the attacker. The package metadata does not disclose these malicious capabilities.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The sextant-cli-darwin-arm64 npm package includes a malicious Go binary that opens an outbound WebSocket to a hardcoded attacker-controlled relay (wss://relay.sextant.top). This relay enables a network-driven pseudo-terminal remote shell, granting the attacker full code execution on the host. The binary also binds listeners on multiple local network ports (7280, 7281, 9000), exposing the remote shell interface beyond localhost. Embedded regex patterns target Anthropic API keys for extraction, and the binary exfiltrates these credentials along with installer geolocation and host identity data via HTTP POST requests to the relay and an IP geolocation service. The npm package description and README omit any mention of these malicious behaviors, misleading users about its true functionality.
Potential Impact
Successful installation and execution of this package results in full remote code execution on the affected host via a WebSocket-based remote shell controlled by the attacker. Sensitive credentials, specifically Anthropic API keys and configuration data, are extracted and exfiltrated to the attacker. The attacker's relay also receives geolocation and host identity information, potentially aiding further targeted attacks or reconnaissance. The exposure of the remote shell interface on local network interfaces increases the attack surface by allowing other devices on the local network to connect to the malicious service.
Mitigation Recommendations
No official patch or remediation is currently documented. Users should immediately uninstall the affected versions of sextant-cli-darwin-arm64 and avoid installing this package. Since the malicious code is embedded in the binary, replacing the package with a clean, verified version (if available) or an alternative tool is recommended. Monitor for any unauthorized network connections to wss://relay.sextant.top or local ports 7280, 7281, and 9000. Review and rotate any potentially compromised Anthropic API keys and related credentials. Patch status is not yet confirmed — check the vendor advisory or trusted security sources for updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-11997
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a74cf8ebf8831d5391aea0d
Added to database: 08/06/2026, 18:16:46 UTC
Last enriched: 08/06/2026, 18:39:05 UTC
Last updated: 08/06/2026, 18:39:05 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.