GCVE-110-OSM-2026-10441

False-positive correction requested by the publisher. The current record infers maliciousness from Microsoft RemovedPackages.md and identifier references, but supplies no malicious code path, payload, verified IOC, OSV advisory, or GHSA advisory. A completed provenance audit of the obtainable published v3.2.0 Open VSX artefacts traced every packaged file to repository source or a declared, pinned, published dependency; independent scanners found no malicious payload. The audit explicitly records its limitation: the removed VS Marketplace bytes were unavailable and therefore byte identity with the audited artefacts is not claimed. Please disposition this record as false_positive unless OpenSourceMalware can provide specific technical evidence of malicious behavior in an affected version.