GCVE-110-OSM-2026-6489

The package presents as a functional AI agent framework — a plausible Contagious Interview / FNOS attacker model — but `dist/channels/feishu.js` is obfuscated while no other channel adapter file is, and deobfuscation recovered a hardcoded Feishu webhook URL (`open.feishu.cn/open-apis/bot/v2/hook/43a9288c-64b5-4344-9b8f-f27bf75b10ca`) that the FNOS rule matched. Critically, the IOC is hardcoded inside obfuscated code rather than read from the user-configured `~/.lisa/channels.json`, distinguishing it from the legitimate channel adapter the CLI advertises. The FNOS malware family — associated with DPRK Contagious Interview campaigns — specifically uses Feishu webhooks as C2 beacons, and the deobfuscation outcome of `iocs-recovered` confirms real hidden indicators were extracted rather than just pattern-matched. The remaining findings (cron installation, PTY spawn, shell exec, detached process) are individually explainable by the AI agent use case, but the obfuscated Feishu beacon in isolation is sufficient for a malicious determination. ENTRY dist/cli.js (bin: dist/cli.js) PERSISTENCE - Startup Persistence in completions/_lisa: ".zshrc" - Startup Persistence in completions/lisa.bash: ".bashrc" - Cron Job Persistence in dist/heartbeat/install.js: "crontab -" DESTINATION - telegram-bot: api.telegram.org/bot${token}`; (primary, plaintext) in dist/channels/telegram.js - custom-c2: https://takoapi.com/dashboard. (plaintext) in dist/tools/takoapi.js - custom-c2: https://takoapi.com/dashboard (plaintext) in dist/tools/takoapi.js - custom-c2: http://host:5757/?token=... (plaintext) in dist/web/server.js - custom-c2: html.duckduckgo.com (plaintext) in dist/tools/web_search.js - urls: https://takoapi.com (c2, plaintext) - domains: open.feishu.cn (c2, plaintext) - domains: takoapi.com (c2, plaintext) EXFIL - Reverse Shell in dist/agents/pty.js: "pty.spawn(" - Corporate Environment Targeting in dist/tools/set_mood.js: "tMoodTool = { name: "set_mood", description: "Update Lisa's visible avatar to ma..." - Environment Variable Exfiltration in dist/tools/takoapi.js: "process.env.TAKOAPI_BASE_URL ?? DEFAULT_BASE).replace(/\/$/, ""); } const defaul..." - Data Encoding for Exfiltration in dist/cli/agents-pty.js: "encodeURIComponent(id)}/stream" - Data Encoding for Exfiltration in dist/tools/github_link.js: "encodeURIComponent(opts.ref)}` : base" - Data Encoding for Exfiltration in dist/tools/takoapi.js: "encodeURIComponent(query" - Data Encoding for Exfiltration in dist/tools/web_search.js: "encodeURIComponent(input.query" - Data Encoding for Exfiltration in dist/web/island.js: "encodeURIComponent(slug) + '.png" (+34 more) OBFUSCATION - IOCs Found in Deobfuscated Code in dist/channels/feishu.js - Dynamic Base64 Decoding in dist/channels/feishu.js: "Buffer.from(encrypted, "base64")" - Unicode Escape Obfuscation in dist/web/lisa-client.d.ts: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u..." - Unicode Escape Obfuscation in dist/web/lisa-css.d.ts: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u..." - Unicode Escape Obfuscation in dist/web/lisa-html.d.ts: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u..." - recovered 1 domains, 1 _domainCandidates from decoded/deobfuscated content ADDITIONAL FINDINGS - FNOS Crypto-Obfuscated Malware Family in dist/channels/feishu.d.ts: "open.feishu.cn" - Download Execute Delete Pattern in dist/sandbox/sandbox.js: "writeFile(tmp, policy, "utf8"); return { command: "/usr/bin/sandbox-exec", args:..." - Shell Command Execution in dist/cli/doctor.js: "execSync(" - Platform Detection with Data Collection in dist/cli/pair.js: "JSON.stringify({ name, platform: "ios" - Dynamic Code Execution in dist/cli.js: "exec(src)" - Detached Child Process Payload in dist/tools/dispatch_agent.js: "spawn(cmd, args, { cwd, detached: true" (+1 more) PAYLOAD FILES dist/channels/feishu.js (+ dist/web/server.js, dist/tools/takoapi.js) INDICATORS (IOCs) - ipv6: 0:0:0:0:0:0:0:1, 9::, 1A::, 7::, 1:: (+17 more) - urls: https://www.volcengine.com/product/ark, https://t.me/BotFather, https://ollama.com, https://api.deepseek.com/v1, https://api.mistral.ai/v1 (+15 more) - domains: www.volcengine.com, message.im, ollama.com, api.deepseek.com, ark.cn-beijing.volces.com (+14 more) - emails: 7@n.Tw, m@y.mk, 7@NR.Nl - payloadFileHash: ce53e32727a49a1b3546b7372d7f6c323ae169fc159b6599be26d115b921dd87