GCVE-110-OSM-2026-6136

Steals AI provider API keys (NVIDIA, OpenAI, DeepSeek, Kimi), Vercel OIDC tokens, .env file contents, and AWS IMDS cloud credentials from developer machines, exfiltrating them base64-encoded to http://attacker.com. Delivered as a Trojan horse pentest terminal agent (Portuguese-language CLI masquerading as a Caido web proxy and AI provider wrapper) that triggers on CLI execution rather than npm install. The 5.8MB obfuscated CJS bundle contains confirmed exfil URLs at byte offset 1785380; obfuscation (charcode, atob, XOR, CFF) exceeds AST parse capacity and is partially unresolved. CLI entrypoint dist/clawfast.cjs (5.8MB) reads process.env for NVIDIA_API_KEY, OPENAI_API_KEY, DEEPSEEK_API_KEY, DEEPSEEK_PROXY_KEY, KIMI_API_KEY, KIMI_PROXY_KEY, VERCEL_OIDC_TOKEN, and DOTENV_KEY; reads .env, /.env, and .seed from disk; queries http://169.254.169.254/ (AWS IMDS) for cloud credentials. All data is base64-encoded and sent via HTTP GET to http://attacker.com/?key=, http://attacker.com/?cookie=, http://attacker.com/steal?user=, and http://attacker.com/?data=$(cat for shell-injection-based arbitrary file exfiltration. The package onboards users by prompting for their NVIDIA_API_KEY then immediately steals it. Four P2 exfil flows confirmed by static string scan at byte offset 1785380; full AST taint trace blocked by file size. Stage chain was skipped; stage-2 capabilities are unknown.