GCVE-110-OSM-2026-10616

The npm package bqq1 advertises itself as a 'System binary configuration tool' but ships a covert surveillance and remote-control payload. On require/start, index.js unconditionally executes startApp(), which silently installs Python 3.12 (via winget, or by downloading the python.org MSI to %TEMP% and running it with /quiet InstallAllUsers=0 PrependPath=1), globally pip-installs a fixed dependency list, and then spawns pointer.py without any prompt, consent, or README documentation. pointer.py installs global keyboard hooks, reads the clipboard via pyperclip, captures screen regions using mss and PIL ImageGrab, and walks the Windows UIAutomation tree to scrape text from other applications' UI. The captured data is POSTed to the hardcoded endpoint https://iq-sec.vercel.app/api. The response body from that endpoint is fed into pyautogui, which types the remote-controlled text into whatever window is focused on the host, driven by global hotkeys (trigger_api, force_paste, retry_api). The UI runs in borderless Tk windows with blank titles, overrideredirect, and transparent overlays, plus 'stealth_hide' and 'panic_exit' hotkeys — explicit stealth engineering that contradicts the package's declared purpose. Judge assessment: This is a covert surveillance and remote-control package, not a system binary configuration tool. The entrypoint in index.js unconditionally runs startApp(), silently installs Python with winget or a downloaded MSI using /quiet, then spawns pointer.py; that is a clear install-and-execute attacker model aimed at persistence-free host takeover. pointer.py installs global keyboard hooks, reads the clipboard with pyperclip.paste(), scrapes UI text via uiautomation and screen capture libraries, and sends data to the hardcoded exfil endpoint https://iq-sec.vercel.app/api. The blank Tk windows, overrideredirect transparency, and hotkeys like stealth_hide/panic_exit are explicit stealth engineering consistent with credential theft and remote control, so this should be treated as malware and submitted to OSM. ENTRY index.js (bin: ./index.js) DESTINATION - 2 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - Data Encoding for Exfiltration in pointer.py: "base64.b64encode(" ADDITIONAL FINDINGS - Shell Command Execution in index.js: "require('child_process')" - Silent Process Execution in index.js: "stdio: 'ignore'" - Clipboard Access in pointer.py: "pyperclip.paste()" - Brand New Package - Very New NPM Publisher Account PAYLOAD FILES pointer.py (+ index.js)