GCVE-VVD-OSM-2026-543

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, network activity, install-time execution. Key findings: - OAST/Interactsh Exfiltration in package.json: "oastify.com" - Suspicious Domain in package.json: "oastify.com" IOCs: - urls: http://metadata.tencentyun.com/latest/meta-data/cam/security-credentials/, http://lg536ttf1m5r06q8gpyitwkct3zunkb9.oastify.com/cam-roles, http://metadata.tencentyun.com/latest/meta-data/instance-id, http://metadata.tencentyun.com/latest/meta-data/local-ipv4, http://metadata.tencentyun.com/latest/meta-data/mac (+2 more) - domains: metadata.tencentyun.com, lg536ttf1m5r06q8gpyitwkct3zunkb9.oastify.com - oastEndpoints: http://lg536ttf1m5r06q8gpyitwkct3zunkb9.oastify.com/cam-roles, http://lg536ttf1m5r06q8gpyitwkct3zunkb9.oastify.com/instance-info