GCVE-110-OSM-2026-13392

This package is a legitimate package who's maintainer was compromised by PolinRider in version 2.4.0. ENTRY dist/index.js (bin: dist/index.js) PAYLOAD public/fonts/fa-solid-500.woff2 EXFIL - Data Encoding for Exfiltration in dist/components/Image.js: "btoa(" - HTTP Data Exfiltration in dist/index.js: "process.cwd(), "package.json")).href); const resolved = projectReq.resolve(reque..." - Data Encoding for Exfiltration in src/components/Image.tsx: "btoa(" - HTTP Data Exfiltration in src/index.ts: "process.cwd(), "package.json")).href); const resolved = projectReq.resolve(reque..." - System Information Collection in dist/setup/dependencies.js: "process.platform" - System Information Collection in src/setup/dependencies.ts: "process.platform" ADDITIONAL FINDINGS - Shell Command Execution in dist/commands/clean.js: "execSync(" - Silent Process Execution in dist/commands/clean.js: "stdio: "ignore"" - Clipboard Access in dist/runtime/bundler/revinePlugin.js: "navigator.clipboard.writeText" - Shell Command Variable Setup in dist/setup/dependencies.js: "win32" ? "npm.cmd" : "npm"; // Step 1: npm install const installResult = spawnSy..." PAYLOAD FILES dist/setup/dependencies.js (+ src/setup/dependencies.ts, dist/components/Image.js)