This package has a preinstall script to download an execute a Go-variant of the Cobalt Strike beacon.
{ "malicious-packages-origins": null }