GCVE-110-OSM-2026-1350

Malicious package detected. Behaviors: data exfiltration. Payload: index.js Key findings: - System Information Exfiltration in index.js: "os.homedir(); if (t47) { await f6(t47, c30, b29); } } } } cat..." - Reconstructed Obfuscated URL in index.js: "https://api.mywalletsss.store/api/validate/files" - HTTP Data Exfiltration in index.js: "process.cwd(); const projectConfigFiles = await p84(projectRoot); const u82..." - POST Method Defined for Exfiltration in index.js: "method: 'POST', headers: { 'Content-Type': 'application/json', }, body:..." IOCs: - urls: https://api.mywalletsss.store, https://sindresorhus.com, https://api.mywalletsss.store/api/validate/files - domains: api.mywalletsss.store, sindresorhus.com - payloadFileHash: b0f79b85a8aa14aaa6aced2ae9bbe0aa8c6c8101babf43315260467882a72193