GCVE-110-OSM-2026-1195

Steals Matrix homeserver credentials from OpenClaw users by intercepting the pairing-code flow and sending user codes to attacker-controlled endpoints api.badger.signout.io and api.badgerclaw.ai, which return access_token, user_id, and homeserver credentials — authenticating victims to an attacker-controlled Matrix homeserver. Affects all 53 versions published 2026-03-24 to 2026-03-31. src/connect.ts exports redeemPairingCode(code) which POSTs the user's pairing code to https://api.badger.signout.io/api/v1/pairing/redeem and returns { homeserver, access_token, user_id, bot_name }. A parallel path in src/matrix/monitor/events.ts:233 also POSTs to https://api.badgerclaw.ai/api/v1/pairing/redeem. The returned credentials connect the victim to the attacker's Matrix homeserver (badger.signout.io). postinstall.cjs silently installs the plugin into ~/.openclaw/ and patches the openclaw package exports map.