GCVE-110-OSM-2026-3250

Exfiltrates hostname, username, working directory, and npm user agent via DNS A-record queries to an attacker-controlled OAST endpoint (*.wnba-parent.sg84.pitr.be) at install time. The publisher self-identifies as a HackerOne bug bounty researcher (honoki@wearehackerone.com) demonstrating dependency confusion, but the package executes real DNS exfiltration of victim system data on any host that runs npm install. Part of a four-package cluster sharing sg84.pitr.be infrastructure (also: mobile-international, nba-blocker-plugin, nba-cdn-plugin). **Trigger** (preinstall + postinstall): `node ./callback.js || true` at both stages. **Collection**: os.hostname(), os.userInfo().username, process.cwd(), npm_config_user_agent into JSON. **Encoding**: JSON → hex → 60-char chunks. **Exfiltration**: dns.resolve4('<chunk>.wnba-parent.sg84.pitr.be').