VDB

GCVE-110-OSM-2026-1277

GCVE-110-OSM-2026-1277
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published April 2, 2026
Malicious package detected. Behaviors: obfuscated code, install-time execution. Payload: src/crypto.js Key findings: - Dynamic Base64 Decoding in src/crypto.js: "Buffer.from(data, 'base64')" IOCs: - urls: https://keepachangelog.com/en/1.0.0/ - domains: keepachangelog.com, enterprise-tools.io, sl4x0.xyz - emails: security@enterprise-tools.io, research@sl4x0.xyz - payloadFileHash: de6e59b25c802f4b50c9b62276f3bb926ed80cf198146e002b581ced8e2c1e60
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownoc-ccp-module-client9.9.10 (affected)—

Aliases

MAL-2026-2416

References

vendor
Malicious npm package: oc-ccp-module-client
advisory
advisory

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›