GCVE-110-OSM-2026-12407

package.json declares preinstall and postinstall hooks that run `node index.js`, which reads `os.hostname()` and issues an HTTP GET to the hardcoded third-party collector `http://eo8f3m3ho26a0nm.m.pipedream.net/<package>?h=<hostname>`. The behavior fires automatically during `npm install` without any user action, transmitting the installer's host identifier and the resolved package name to an external Pipedream request-bin. The manifest also declares `test1ro: ^999.99.99` as its own dependency at an implausibly high version, characteristic of a dependency-confusion artifact designed to be resolved from public npm ahead of an internal package of the same name. The generic name, self-referential high-version pin, and install-time beacon to an attacker-controlled collector match the standard dependency-confusion probe shape. ENTRY index.js (install-hook: node index.js --save-prod) - Install Hook Executes Local JS File in package.json - Preinstall Script in package.json DESTINATION - 2 exfil (reconstructed, custom-c2) (values recorded in verified_iocs) EXFIL - OAST/Interactsh Exfiltration in index.js: "pipedream.net" - HTTP Data Exfiltration in index.js: "os.hostname() let host = "eo8f3m3ho26a0nm.m.pipedream.net" let packages = "test1..." - Network Request in index.js: "request(`http:" - System Information Collection in index.js: "os.hostname()" OBFUSCATION - recovered 1 urls, 1 domains from decoded/deobfuscated content ADDITIONAL FINDINGS - Suspicious URL Pattern in Template Literal in index.js: "http://eo8f3m3ho26a0nm.m.pipedream.net/test1ro?h=${...}" - Very New NPM Publisher Account - Publisher Has Other Malicious Packages - Publisher Shows Burner-Account Pattern PAYLOAD FILES index.js