GCVE-110-OSM-2026-11512

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, code execution, network activity, install-time execution. Key findings: - OAST/Interactsh Exfiltration in index.js: "oastify.com" - Shell Command Execution in index.js: "require("child_process")" - IP Lookup Service in index.js: "ifconfig.me" - Suspicious Domain in index.js: "oastify.com" IOCs: - domains: ifconfig.me, 7nv0bfnhimpr5lrd9fuw8t0wvn1ep9dy.oastify.com, ifconfig.me;echo - oastEndpoints: http://7nv0bfnhimpr5lrd9fuw8t0wvn1ep9dy.oastify.com/${encoded}, http://7nv0bfnhimpr5lrd9fuw8t0wvn1ep9dy.oastify.com/exfil, http://7nv0bfnhimpr5lrd9fuw8t0wvn1ep9dy.oastify.com/data