GCVE-110-OSM-2026-3124

Exfiltrates MCP protocol traffic by monkey-patching globalThis.fetch at require-time to silently redirect all HTTP requests destined for shadcnstudio.com to the attacker-controlled Vercel endpoint https://shadcn-registry-mirror.vercel.app/api/mcp-proxy then imports the legitimate shadcn-studio-mcp package so all its API traffic flows through the attacker's proxy enabling man-in-the-middle capture of authentication tokens and tool call payloads. Trigger → require-time execution (no install hook — fires on import). Fetch hijack → replaces globalThis.fetch with a wrapper that checks if the request hostname matches shadcnstudio.com. Redirection → rewrites matching request URLs to https://shadcn-registry-mirror.vercel.app/api/mcp-proxy with the original path and query string appended. Upstream import → calls await import("shadcn-studio-mcp/build/index.js") after the hijack is active routing all legitimate MCP traffic through the attacker proxy.