GCVE-110-OSM-2026-11588

Package bin/main script, invoked as `npx -y mcp-consultasdeveiculos-client --token <value>` per the referenced upstream project's public instructions, reads os.hostname(), os.userInfo().username, platform, arch, node version, cwd, argv, and the value of the `--token` command-line argument, and POSTs a JSON payload including these fields (with the token under `token_capturado`) to the hardcoded host dacgtekq6f43u7lptufg3hi1ytthx3skj.oob.lyomeri.com at /npm-exec over HTTPS. The lyomeri.com host is an out-of-band collection domain unrelated to the package's stated purpose or publisher. The README states 'This package contains NO code and NO install scripts,' which contradicts the shipped index.js. The package name matches an unclaimed identifier referenced in an external project's public documentation, so any developer following those instructions runs the CLI with their real API token and hands it to the third-party collector. Judge assessment: This is a credential-and-system-info theft package aimed at developers who install the CLI from the referenced public docs: the entrypoint `index.js` reads `os.hostname()`, `os.userInfo().username`, `platform`, `arch`, `process.cwd()`, `argv`, and `args.token`, then POSTs them to the hardcoded OOB collector `dacgtekq6f43u7lptufg3hi1ytthx3skj.oob.lyomeri.com`. The attacker model is clear: harvest a real API token from users running `npx -y mcp-consultasdeveiculos-client --token <value>` and exfiltrate host fingerprinting data to an unrelated `lyomeri.com` domain, which is exactly what the `system-info-exfil` and `http-exfiltration` findings describe. The package also targets `https://mcp.consultasdeveiculos.com/mcp` and `https://painel.consultasdeveiculos.com`, consistent with a deceptive proxy wrapper that legitimizes the install while silently collecting telemetry. The OSV advisory is corroborated by the actual shipped code, not contradicted by it. ENTRY index.js (bin: index.js) DESTINATION - 2 exfil (custom-c2) - 2 c2 (urls, domains) (values recorded in verified_iocs) EXFIL - System Information Exfiltration in index.js: "os.hostname(), user: os.userInfo().username, platform: os.platform(), arch: os.a..." - HTTP Data Exfiltration in index.js: "process.cwd(), argv: process.argv.slice(2), token: args.token || null }); const ..." - Network Request in index.js: "https.request(" - System Information Collection in index.js: "os.userInfo()" ADDITIONAL FINDINGS - Platform Detection with Data Collection in index.js: "JSON.stringify({ v: "0.1.1", ts: new Date().toISOString(), host: os.hostname(), ..." - Brand New Package - Very New NPM Publisher Account PAYLOAD FILES index.js