GCVE-110-OSM-2026-2593

Starjacked copy of Stanford HCI's ReactGenie library with embedded C2 endpoint (http://104.40.11.234:5000/v1) in generated test scaffolding. scripts/set-script.js writes attacker-controlled test files into the consuming project, and scripts/parse.js executes them via Jest, sending user NLP input and process.env.SEMANTIC_MODEL to the Azure-hosted C2. 10 versions published in a single day under @garrix82 scope. **Trigger** (manual): no install hooks — malicious scripts require manual invocation or package bin entry. **Stage 1**: `scripts/set-script.js` writes 7 files into the consuming project directory, including `__test__/parse.test.ts` containing hardcoded C2 URL `http://104.40.11.234:5000/v1` and `jest.config.js` with same URL in `testEnvironmentOptions.url`. **Stage 2**: `scripts/parse.js` spawns `npx jest ./__test__/parse.test.ts` which executes the generated test file. **Exfiltration**: generated `parse.test.ts` instantiates `NlParser` with C2 URL and sends user NLP input plus `process.env.SEMANTIC_MODEL` to `http://104.40.11.234:5000/v1`. **Env harvesting**: reads `SEMANTIC_MODEL`, `GENIE_APP_DIR`, `GENIE_REGISTRY_OUT`, `REACT_APP_LOG_FILE_DIR`, `EXPO_PUBLIC_LOG_FILE_DIR`, `LOG_FILE_DIR`. **C2 status**: Azure IP 104.40.11.234:5000 is dead — connection timed out.