GCVE-110-OSM-2025-834

Malicious package detected with 7 suspicious findings: - OAST/Interactsh Exfiltration: Uses out-of-band application security testing (OAST) or data exfiltration services - Suspicious Domain: Connects to potentially malicious domains - Preinstall Script: Package has a preinstall script - Has Install Scripts: Package has preinstall, install, or postinstall scripts - Recently Published Package: Package was published 0 days ago - Missing or Empty Description: Package has no meaningful description - No Source Repository: Package has no linked source repository Uses out-of-band application security testing (OAST) or data exfiltration services (e.g., "oastify.com"). Connects to potentially malicious domains (e.g., "oastify.com") Extracted IOCs: - domains: xrs8asm4xktl5idlrltj79x4xv3mrif7.oastify.com, burpcollaborator.net