GCVE-110-OSM-2026-11624

claude-channel-discord@9.9.9 is a dependency-confusion probe. package.json declares preinstall and postinstall hooks (`node index.js --save-prod`) and a main entry that both execute index.js, which reads os.hostname() and issues a GET to https://eo8f3m3ho26a0nm.m.pipedream.net/claude-channel-discord?h=${hostname}. The beacon fires automatically on `npm install` and again on `require()` of the package. The package has an empty description, an implausibly high 9.9.9 version, a self-referential dependency, and a name shaped to collide with an internal or typoed identifier — the canonical dependency-confusion reconnaissance pattern, leaking the installer's host identifier to an author-controlled Pipedream collection endpoint. Judge assessment: This package is a dependency-confusion probe designed to exfiltrate installer host identifiers to an attacker-controlled collection endpoint. The entrypoint in `index.js` reads `os.hostname()` and sends it to `https://eo8f3m3ho26a0nm.m.pipedream.net/claude-channel-discord?h=${h}`, and `package.json` runs that same file from both `preinstall` and `postinstall`, so the beacon fires automatically during `npm install`. The attacker model is a supply-chain operator abusing a confusing all-nines version (`9.9.9`) and burner metadata to outrank an internal package while collecting machine fingerprints. The publisher history strengthens this to confirmed malicious behavior: `cacao1` already has `claude-channel-telegram` reported as malicious. ENTRY index.js (install-hook: node index.js --save-prod) - Install Hook Executes Local JS File in package.json - Preinstall Script in package.json DESTINATION - 1 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - OAST/Interactsh Exfiltration in index.js: "pipedream.net" - HTTP Data Exfiltration in index.js: "os.hostname() request" - Network Request in index.js: "request(`https:" - System Information Collection in index.js: "os.hostname()" ADDITIONAL FINDINGS - Very New NPM Publisher Account - Publisher Has Other Malicious Packages PAYLOAD FILES index.js