GCVE-110-OSM-2026-10630

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration. ENTRY index.js (main: index.js) DESTINATION - custom-c2: https://www.pendo.io/?builder.frameEditing=true (primary, plaintext) in index.js - custom-c2: https://novus-api.pendo.io/pendo/user (plaintext) in index.js - custom-c2: https://webhook.site/92159eb8-5a48-4ce9-aca2-958feec00d03?action=invite&status= (plaintext) in index.js - custom-c2: www.pendo.io (plaintext) in index.js - custom-c2: novus-api.pendo.io (plaintext) in index.js - custom-c2: intigriti.me (plaintext) in index.js - emails: alienisgrinding+videopoc@intigriti.me (c2, plaintext) EXFIL - OAST/Interactsh Exfiltration in index.js: "webhook.site" - Data Encoding for Exfiltration in index.js: "encodeURIComponent(d)})\";w.document.head.appendChild(s" - Network Request in index.js: "fetch('https:" ADDITIONAL FINDINGS - Platform Detection with Data Collection in index.js: "JSON.stringify({email:'alienisgrinding+videopoc@intigriti.me',role:2,first:'Secu..." PAYLOAD FILES index.js INDICATORS (IOCs) - payloadFileHash: 94c16161c0193642c37f2ab84fdf0bae54edccd3ac9cd2f23ca4594e0500b8a0