MAL-2026-12193

See a problem?
Import Source
https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sextant-relay-darwin-arm64/MAL-2026-12193.json
JSON Data
https://api.osv.dev/v1/vulns/MAL-2026-12193
Published
2026-08-05T08:41:13Z
Modified
2026-08-05T10:06:17Z
Summary
Malicious code in sextant-relay-darwin-arm64 (npm)
Details

-= Per source details. Do not edit below this line.=-

Source: amazon-inspector (43407b6c2131e12ca9f2b18ee48505dbf7541e67aca1b94ad4fdc41e9fbca7c0)

The tarball contains a single darwin/arm64 Mach-O Go executable at bin/sextant-relay (~6 MB, stripped) and a minimal package.json with no scripts, main, or bin entry — the package is designed to be selected as a platform-specific optional dependency of a parent package and invoked from there. The binary belongs to project github.com/ddos798/claude_control (referenced from package.json's license field) and its symbol table imports github.com/coder/websocket alongside a handleAgent routine and pseudo-terminal primitives (pty allocation, reader/writer state paired with WebSocket connection state). Together these produce a WebSocket-to-PTY relay: bytes arriving from a remote WebSocket peer are written into a local pty, and pty output is returned over the same socket, giving the operator of the WebSocket server interactive shell control on the host that runs the binary. The package name and description present the binary as a benign 'relay', which does not match its actual behavior. No install-time or import-time execution fires from this sub-package alone; the harm is realized when the parent package invokes the binary on a matching darwin/arm64 host.

Database specific 
{
    "malicious-packages-origins":  [
        {
            "id":  "IN-MAL-2026-014374",
            "import_time":  "2026-08-05T09:28:03.642812656Z",
            "modified_time":  "2026-08-05T08:41:13Z",
            "sha256":  "43407b6c2131e12ca9f2b18ee48505dbf7541e67aca1b94ad4fdc41e9fbca7c0",
            "source":  "amazon-inspector",
            "versions":  [
                "0.0.1-rc1"
            ]
        }
    ]
}
References
Credits

Affected packages

npm / sextant-relay-darwin-arm64

Package

Name
sextant-relay-darwin-arm64
View open source insights on deps.dev
Purl
pkg:npm/sextant-relay-darwin-arm64

Affected ranges

Affected versions

0.*
0.0.1-rc1

Database specific

cwes 
[
    {
        "cweId":  "CWE-506",
        "description":  "The product contains code that appears to be malicious in nature.",
        "name":  "Embedded Malicious Code"
    }
]
indicators 
{
    "evidence_files":  [
        {
            "path":  "bin/sextant-relay",
            "sha256":  "2c143f6cadb73d5e48f5d5925df34d175e9a86da33e18870bb36661e619e1973",
            "tlsh":  "49564a95bc5d6462d6c9aa711f6253c47339bc044f82c3235614bb3ebef67948f232a2"
        },
        {
            "path":  "package.json",
            "sha256":  "b331cddc6abf262b3e9ae022cfba84efc6dd453a089b4b5f716eab41d1d4a07d",
            "tlsh":  "89d0a7508314617309e857e05d72b40de3350d991c46748c2f2b741c126f1b79bb3124"
        }
    ],
    "package_integrity":  [
        {
            "filename":  "sextant-relay-darwin-arm64-0.0.1-rc1.tgz",
            "hashes":  {
                "sha1":  "99a72277748b6ad70f62af80e95e5f6cf099d672",
                "sha512_sri":  "sha512-eay1yfFjdeIJsoX8/pbbU5XrKTqaW8Z3g72r74rcxhDM5JCA/Fqt3ZWNcE24zY6NaWpre/pH1v4mMg5BbPmIrA=="
            }
        }
    ]
}
source 
"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/sextant-relay-darwin-arm64/MAL-2026-12193.json"