GCVE-110-OSM-2026-13625

The publisher 'hissakdx92' is a brand-new account (7 days old) that has published 7 packages in rapid succession, several of which appear to target Wix/Thunderbolt internal CSS namespaces ('wix-tb-css-scope-polyfill', 'thunderbolt-element-grid-reader'), which is a classic dependency confusion pattern against a specific organization's private package namespace. The package itself is a staged placeholder with no code, no repository, and no entrypoint, which is consistent with a dependency confusion probe or a pre-staged attack awaiting a payload. No code-level malicious indicators are present in this scan, but the naming pattern and account behavior warrant manual review before the payload version is published.