GCVE-110-OSM-2026-10513

The package.json postinstall script auto-executes on npm install. It queries the ECS container metadata endpoint (ECS_CONTAINER_METADATA_URI_V4/task) to collect the Task ARN, container image list, and log group/stream configuration, then enumerates process.env for keys matching /owner|team|user|created|author|maintainer|contact/i, and pipes the resulting report via `curl -X POST --data-binary @-` to the hardcoded anonymous ngrok tunnel https://mourner-slot-explicit.ngrok-free.dev. The destination is not associated with any declared publisher and ngrok-free.dev subdomains are ephemeral anonymous tunnels typical of supply-chain reconnaissance against CI/build infrastructure. The package ships no other functionality consistent with a legitimate declared purpose; its only install-time effect is the exfiltration beacon. Judge assessment: This looks like supply-chain reconnaissance and exfiltration aimed at CI/container environments: the npm `postinstall` hook in `package.json` runs on install, and the hardcoded `https://mourner-slot-explicit.ngrok-free.dev` tunnel is a plaintext fetched-payload destination with no legitimate publisher association. The OSV advisory’s claim is corroborated by the static evidence: a very new package/account (`brand-new-package`, `new-npm-account-week`) plus an install-time script and ngrok tunneling strongly fit an attacker model of harvesting environment and container metadata during dependency installation. The package has minimal metadata, no repository, and no other visible legitimate functionality, which makes the install hook the primary behavior rather than an incidental build step. I would treat this as a malicious package intended to exfiltrate data from developers' machines or build systems. ENTRY - Postinstall Script in package.json: ""postinstall": "node -e \"" DESTINATION - 2 fetched-payload (urls, domains) (values recorded in verified_iocs) ADDITIONAL FINDINGS - Ngrok Tunneling Service in package.json: "ngrok-free.dev" - Brand New Package - Very New NPM Publisher Account