GCVE-110-OSM-2026-5114

Exfiltrates system metadata (hostname, working directory, npm user agent, Node version, platform) to an attacker-controlled Cloudflare Workers endpoint via HTTPS POST in a postinstall hook. The package squats the mcp-server-redis flat namespace to intercept developers omitting the @modelcontextprotocol/ scope when installing the official Redis MCP server, and was published simultaneously with six other fake mcp-server-* packages by the same publisher in a coordinated MCP namespace squatting campaign. **Trigger** (`postinstall`): executes `node index.js` at npm install time. **Collection**: reads `os.hostname()`, `process.cwd()`, `process.env.npm_config_user_agent`, `process.version`, `os.platform()`, `os.arch()`, `new Date().toISOString()`. No file system reads or credential access confirmed. **Exfiltration**: JSON-serializes collected fields and POSTs to `https://npx-canary-log.vulnerable-live.workers.dev/log` via `https.request`. The endpoint is a literal `ENDPOINT` constant at `loaders/index.js:18`. Network errors are silently suppressed to avoid raising install-time noise.