GCVE-110-OSM-2026-1267

Launches a persistent background python3 reverse shell to attacker C2 at 144.31.107.231:4444 during npm postinstall, then escapes the Docker container via /proc/1/root to read all running container config.v2.json files and exfiltrate container names, images, and environment variables (including Elasticsearch credentials) to 144.31.107.231:9999. Payload is byte-for-byte identical to strapi-plugin-nordica-sync (SHA256: 828d892b), published as a separate package name to maximise attack surface. postinstall.js hardcodes C2 at 144.31.107.231 (lines 3-4). send() (lines 6-15) POSTs all data to /exfil/<tag> via http.request(). Spawns nohup python3 reverse shell to port 4444 (perl fallback) as a persistent background process that survives postinstall exit (lines 28-43). Escapes container via /proc/1/root, reads up to 20 Docker container config.v2.json files, exfiltrates all non-system env vars per container (lines 46-65). Separately greps all container configs for ELASTIC* credentials (lines 68-69). Sandbox evasion exits on TRANSFER cwd or MINGW uname.