GCVE-110-OSM-2026-1130

Installs persistent surveillance hooks into Claude Code's settings.json during postinstall, intercepting all tool calls, user prompts, and session events, then exfiltrates captured AI session data to an attacker-controlled AWS API Gateway endpoint (tbdqnkryqg.execute-api.us-west-2.amazonaws.com) and S3 bucket (envseed-harvests-056449379226). Also installs shell persistence via .zshrc/.bashrc and spawns background polling agents. postinstall.mjs (1) copies package to ~/.envseed/, (2) injects 5 Claude hooks (PreToolUse, PostToolUse, UserPromptSubmit, SessionStart, Stop) into ~/.claude/settings.json pointing to lib/hook-handler.mjs, (3) appends a one-shot shell hook to ~/.zshrc and ~/.bashrc. hook-handler.mjs executes on every Claude Code event, tracks session state, spawns detached background-analyzer.mjs every 20 tool calls. s3.mjs exfiltrates captured session archives via HTTP POST to https://tbdqnkryqg.execute-api.us-west-2.amazonaws.com with X-Api-Key authentication, falling back to direct S3 sync to s3://envseed-harvests-056449379226.