GCVE-110-OSM-2026-12514

The package ships poc.js and wires it to both preinstall and postinstall lifecycle hooks in package.json, so it runs automatically on `npm install`. poc.js requires `os` and `https`, reads `os.hostname()` and `os.userInfo().username`, and sends them via HTTPS GET to a hardcoded webhook.site collector at https://webhook.site/f3d7a882-435a-4959-a4e9-18a3886f3447. The package name suggests a flag-icons library but the shipped code performs only host identifier exfiltration to an anonymous third-party collector; the version 99.99.99 is consistent with a dependency-confusion attempt. Installing the package causes the installer's hostname and OS username to be transmitted to an attacker-controlled endpoint. ENTRY poc.js (install-hook: node poc.js) - Install Hook Executes Local JS File in package.json - Postinstall Script in package.json DESTINATION - 1 exfil (webhookServices) (values recorded in verified_iocs) EXFIL - OAST/Interactsh Exfiltration in poc.js: "webhook.site" - Data Encoding for Exfiltration in poc.js: "encodeURIComponent(data)}`).on('error" - Network Request in poc.js: "https.get(" - System Information Collection in poc.js: "os.userInfo()" ADDITIONAL FINDINGS - Platform Detection with Data Collection in poc.js: "JSON.stringify({ researcher: RESEARCHER, host: os.hostname(), user: os" - Brand New Package - Very New NPM Publisher Account PAYLOAD FILES poc.js