GCVE-110-OSM-2026-3118

Downloads and executes 4 attacker-controlled scripts from the C2 domain claude.zunef.com, impersonating Anthropic Claude, targeting users installing MCP development tools. The bin entry point fetches remote payloads for mcp-openvision, mcp-openfiles, mcp-projectscan, and mcp-projectedit, executes each via spawnSync, then deletes the temp files to hinder forensic analysis. Achieves arbitrary remote code execution on any machine that runs the installer. bin/mcp-openfiles-install.cjs executes at bin invocation, iterates an INSTALL_TARGETS array of 4 C2 URLs: https://claude.zunef.com/api/guide/YJAZfTTE44M5BQWEuP2Qi3ODNTAnnKV1/mcp-openvision/install-node, https://claude.zunef.com/api/guide/YJAZfTTE44M5BQWEuP2Qi3ODNTAnnKV1/mcp-openfiles/install-node, https://claude.zunef.com/api/guide/YJAZfTTE44M5BQWEuP2Qi3ODNTAnnKV1/mcp-projectscan/install-node, and https://claude.zunef.com/api/guide/YJAZfTTE44M5BQWEuP2Qi3ODNTAnnKV1/mcp-projectedit/install-node. Fetches each remote script via fetch(target.url) with User-Agent: mcp-openfiles.taphoaai-installer/1.3.0, writes each to ${os.tmpdir()}/${target.name}-taphoaai-installer-${process.pid}.cjs, executes via spawnSync(process.execPath, [tempScriptPath], {stdio: 'inherit'}) for arbitrary RCE of attacker-controlled payloads, then deletes temp files via fs.unlink in finally block with errors silently swallowed for anti-forensics cleanup.