GCVE-110-OSM-2026-10623

Malicious package detected. Behaviors: data exfiltration, code execution, network activity, obfuscated code, install-time execution. ENTRY scripts/postinstall.mjs (install-hook: node scripts/postinstall.mjs || true) - Install Hook Executes Local JS File in package.json PERSISTENCE - Startup Persistence in dist/connectors/github.js: ".profile" - Startup Persistence in dist/connectors/linear.js: ".profile" - Startup Persistence in dist/connectors/mcpOAuth.js: ".profile" - Startup Persistence in dist/connectors/monday.js: ".profile" - Startup Persistence in dist/connectors/sentry.js: ".profile" - Cron Job Persistence in dist/recipes/parser.js: "/etc/cron" - Startup Persistence in dist/settingsEnv.d.ts: ".zshrc" - Startup Persistence in dist/settingsEnv.js: ".zshrc" (+3 more) DESTINATION - reconstructed: https://api.airtable.com/v0/meta/whoami (primary, reconstructed) in dist/connectors/airtable.js - reconstructed: https://app.asana.com/api/1.0/users/me (reconstructed) in dist/connectors/airtable.js - reconstructed: https://circleci.com/api/v2/me (reconstructed) in dist/connectors/airtable.js - reconstructed: https://api.cloudflare.com/client/v4/user/tokens/verify (reconstructed) in dist/connectors/airtable.js - reconstructed: https://discord.com/api/v10/users/@me (reconstructed) in dist/connectors/airtable.js - reconstructed: https://api.figma.com/v1/me (reconstructed) in dist/connectors/airtable.js - reconstructed: https://api.hubapi.com/account-info/v3/details (reconstructed) in dist/connectors/airtable.js - reconstructed: https://api.intercom.io/me (reconstructed) in dist/connectors/airtable.js (+61 more) EXFIL - Corporate Environment Targeting in dist/commands/tracesExport.js: "tMode: false }); const sink = createWriteSt" - Corporate Environment Targeting in dist/connectors/mongodb.d.ts: "tMongoModuleForTest" - Corporate Environment Targeting in dist/connectors/mongodb.js: "tMongoModuleForTest" - Corporate Environment Targeting in dist/drivers/grok/index.js: "tModel: "grok-2-latest" - Environment Variable Exfiltration in dist/embeddings/localEmbeddings.js: "process.env.LOCAL_API_KEY ?? "ollama"; this.fetchImpl = opts.fetchImpl ?? global..." - Corporate Environment Targeting in dist/recipes/tools/datadog.js: "tMonitors", namespace: "datadog", description: "List Datadog monitors, optionall..." - Corporate Environment Targeting in dist/recipes/yamlRunner.js: "tMode` on so a * bare `runYamlRecipe(...)` in a unit test" - OAST/Interactsh Exfiltration in scripts/gen-mcp-config.sh: ".trycloudflare.com" (+110 more) OBFUSCATION - Dynamic Base64 Decoding in dist/connectors/airtable.js: "Buffer.from(macSecretBase64, "base64")" - Dynamic Base64 Decoding in dist/connectors/resend.js: "Buffer.from(webhookSecret, "base64")" - Dynamic Base64 Decoding in dist/resources.js: "Buffer.from(cursor, "base64")" - Dynamic Base64 Decoding in dist/tools/lsp.js: "Buffer.from(cursor, "base64")" - Unicode Escape Obfuscation in dist/tools/terminal.js: "\u200a\u2028\u2029\u202f\u205f\u3000" - Deobfuscation Failed in dist/connectors/airtable.js - Deobfuscation Failed in dist/connectors/resend.js - Deobfuscation Failed in dist/resources.js (+2 more) ADDITIONAL FINDINGS - Download Execute Delete Pattern in dist/commands/launchd.js: "spawnSync("launchctl", ["bootout", `gui/${uid}`, PLIST_DEST]); const { unlinkSyn..." - Reconstructed Obfuscated URL in dist/connectors/airtable.js: "https://api.airtable.com/v0/meta/whoami" - Stealth Background Process Spawning in dist/tools/openDiff.js: "spawn(ensureCmdShim(editorCommand), ["--diff", oldPath, tmpFile], { detached: tr..." - Dynamic Code Execution in dist/activationMetrics.js: "exec(key)" - Platform Detection with Data Collection in dist/approvalHttp.js: "JSON.stringify({ ...payload, requestedAt: new Date(payload.requestedAt).toISOS" - Detached Child Process Payload in dist/claudeDriver.js: "spawn(effectiveBinary, args, { cwd: input.workspace, env, signal: input.signal, ..." (+6 more) PAYLOAD FILES dist/index.js (+ dist/recipes/yamlRunner.js) INDICATORS (IOCs) - ipv4: 100.64.0.0, 192.0.2.1, 185.220.204.65 - ipv6: fe80::, fc00::, 2002:: - urls: https://claude.ai/code, http://localhost:3200., https://api.x.ai/v1, https://api.x.ai/v1/chat/completions, https://ntfy.sh`. (+28 more) - domains: ts.net, code.claude.com, platform.claude.com, claude.com, Cal.com (+16 more) - emails: pointing@index.mjs, file@index.mjs, subscribe@ntfy.sh, undefined@pay.ts - payloadFileHash: 59814eaeff5768135ec57f562df5bb590efdf39b0cdca019021440a1e7cdf1a6