GCVE-110-OSM-2026-13741

This package exhibits all hallmarks of a coordinated supply-chain attack. The publisher account 'beloved-lenora' (email ztz0.com — a burner/generated domain) was created approximately two days ago and immediately published three thematically linked packages: opencode-orchestrator, opencode-shared-rpc, and opencode-shell-guard — a naming pattern consistent with a dependency-confusion or typosquatting campaign targeting a legitimate 'opencode' project. npm has already applied a security holding to this package (hasSecurityHolding + securityHoldingRecovered both true), indicating the registry's own abuse team confirmed malicious intent. OSV advisory MAL-2026-17906 independently corroborates this, describing full host compromise. Although the static analyzer could not recover an entrypoint or exfil path (likely because the tarball was pulled before analysis could fully extract it), the convergence of a fresh burner account, throwaway email domain, coordinated namespace occupation, registry security holding, and a MAL-prefixed OSV advisory makes a benign explanation implausible. ADDITIONAL FINDINGS - Brand New Package - Very New NPM Publisher Account