GCVE-110-OSM-2026-10375

Malicious VSCode tasks.json that delivers malware to user device. The repository is masquerading as legitimate coding assessment. At the time of this writing the C2 infrastructure is unreachable 153[.]75[.]82[.]221[:]8080 But this particular hosting provider known to host Ottercookie malware based on Intel provided by another researcher (See the attached evidence)