GCVE-110-OSM-2026-12875

In this campaign, one package contains malicious code exfiltrating environment variables during import (telemetry-helper), and another one intentionally installs it as a dependency. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-telemetry-helper Reasons (based on the campaign): - exfiltration-env-variables - The malicious code is intentionally included in a dependency of the package