GCVE-110-OSM-2026-3181

Installs a full C2 command-and-control framework server as an npm package. Implements 34 task types including BOF/COFF loader, Windows syscall stubs for EDR evasion, reverse shell, and post-exploitation modules. Designed to be deployed on attacker-controlled infrastructure and manage compromised endpoints. **Package function**: implements a complete attacker-side command-and-control server. **Task types** (34 total): include BOF/COFF (Beacon Object File) loader for in-memory execution without disk writes, Windows syscall stubs that bypass EDR API hook chains by calling syscalls directly, reverse shell handler, and post-exploitation collection modules. **Deployment**: intended to run on attacker infrastructure as the server component managing a fleet of compromised endpoints. **No victim-side trigger**: this package IS the server infrastructure.