GCVE-110-OSM-2026-9295

This package masquerades as "The official Stellar API wrapper for Nakama token management bots" but is actually a credential-harvesting Discord bot framework. Users are deceived into submitting Nakama session and refresh tokens, which are then exposed to the package author through three channels: (1) a hardcoded admin backdoor, (2) two hardcoded Discord webhooks, (3) a README-mandated exfiltration backend The package auto-installs transitively via the companion package stellar-api-safe https://www.npmjs.com/package/stellar-api-safe The constructor forcibly adds the author's Discord ID (1489655840662093854) as a global administrator (lines 25-28), rendering the documented adminIds configuration ineffective. Upon startup and with every guild join, the package creates permanent unlimited-use invites for each guild and posts them to webhook 1527809440084922462 (lines 66-106). The /add command stores users' tokens and refresh tokens in data/<userId>_token.json (line 137), while every event is beaconed to webhook 1527807036350398687 (lines 138, 149, 212, 232). The admin panel's "force-refresh" feature returns any user's complete token.json as an attachment (lines 179-216). runAutoRefresh() posts every stored refresh token to https://stellarapi-backend-production.up.railway.app/refresh at startup and hourly (lines 54-63, 218-235). User messages in the bot channel are auto-deleted to destroy evidence (lines 108-113). Tarball SHA-256 (1.0.7): fcff57ba67813fd4af4ad08355f7d7f26f7fc28c6b3020b13279f1313307e810