GCVE-110-OSM-2026-13289

On October 5, 2026, a malicious version of the @subql/common package, version 5.8.3, was published. It adds a postinstall script that runs manifest-cache.js. The file decodes a large obfuscated blob (base64, rolling XOR, and gzip), then executes it with new Function in a detached, silent process with access to the full environment. A new maintainer published the release without provenance. The same code also runs when the package is imported. Treat this as a supply-chain compromise. ENTRY dist/index.js (main: dist/index.js) EXFIL - Corporate Environment Targeting in dist/project/versioned/v1_0_0/models.js: "tModel = exports.BlockFilter" ADDITIONAL FINDINGS - Dangerous Function Calls in dist/project/utils.js: "yaml.load(" PAYLOAD FILES dist/project/versioned/v1_0_0/models.js