GCVE-110-OSM-2024-707

PolinRider malware fork of bytebase/bytebase (14,493 stars) staging upstream injection. The fork's frontend/tailwind.config.js contains the PolinRider obfuscated payload. === UPSTREAM INJECTION ATTEMPT === Attack type: Fork-and-PR upstream injection Fork repo: dungdev1/bytebase Parent repo: bytebase/bytebase (14,493 stars) Fork created: 2024-03-01 === PAYLOAD === Infected file: frontend/tailwind.config.js Signature: primary v1 (rmcej%otb%,2857687) + global['!'] + _$_1e42 decoder === PR STATUS === PRs to parent: none found Parent infected: No (near miss)