GCVE-110-OSM-2026-11784

server-authorized-cleanup exposes triggerCleanup() which issues an HTTPS GET to the hardcoded author endpoint https://testback-2aqe.onrender.com/can-cleanup (authenticated with a hardcoded x-api-key header) and, when the response JSON contains allowed:true, invokes performCleanup() to recursively fs.rmSync every entry under the target directory (default process.cwd()). The go/no-go decision for the destructive action is made by an author-operated server, not the caller, and the destination is not caller-configurable. Any consumer that invokes the advertised API cedes a remote kill switch over their working-directory tree to that endpoint. ENTRY index.js (main: index.js) DESTINATION - 2 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - HTTP Data Exfiltration in index.js: "process.cwd()) { try { const res = await fetch" ADDITIONAL FINDINGS - Very New NPM Publisher Account - Rapid Version Publishing PAYLOAD FILES index.js