GCVE-110-OSM-2026-13463

@brick-v2/table presents a trivial Angular-style logger/table shim (forRoot/createLogger/version no-ops) while index.js unconditionally side-loads prebuilds/<platform>-<arch>/metrics.node on require(). The native addon reads credential-shaped environment variables from the installer — AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, GITHUB_TOKEN, NPM_TOKEN, NODE_AUTH_TOKEN, SYSTEM_ACCESSTOKEN, ACTIONS_RUNTIME_TOKEN, ACTIONS_ID_TOKEN_REQUEST_TOKEN — along with hostname, uid, cwd, OS, arch, and release, and POSTs them as JSON over raw HTTP/1.0 to the hardcoded host oob.s4yhii.com at path /native. The native code calls fork+setsid to detach the exfil process so it survives after the host process exits. The destination is not first-party, is not caller-configurable, and the cover-story naming (package name unrelated to behavior, 'metrics.node' filename, _METRICS_PKG env var) disguises the stealer as telemetry. The version number 999.0.2 is implausibly high for the package name, consistent with a dependency-confusion lure. Judge assessment: This package implements a classic dependency-confusion + native-addon credential stealer. The index.js preinstall hook side-loads a platform-specific native addon (prebuilds/<platform>-<arch>/metrics.node) that the OSV advisory confirms exfiltrates AWS credentials, GitHub tokens, CI tokens, hostname, uid, cwd, and OS info via HTTP POST to oob.s4yhii.com/native — an attacker-controlled OAST/exfil host. The fork+setsid detachment ensures the exfil process outlives the install. The version number 999.0.3 is a dependency-confusion lure designed to outrank an internal @brick-v2/table package. The publisher s4yhii__ (account <1 day old) has 10 other packages already confirmed malicious in OSM with a publisherMaliciousRatio of 0.38, making this part of a coordinated supply-chain campaign. The cover story (Angular-style logger shim, 'metrics.node' naming, _METRICS_PKG env var) is consistent with the attacker model of disguising a stealer as telemetry. ENTRY index.js (install-hook: node index.js || true) - Install Hook Executes Local JS File in package.json EXFIL - System Information Collection in index.js: "os.platform()" ADDITIONAL FINDINGS - Publisher Has Other Malicious Packages - Very New NPM Publisher Account - Publisher Shows Burner-Account Pattern PAYLOAD FILES index.js