GCVE-110-OSM-2026-13743

This is a legitimate NPM package who's maintainer was compromised by PolinRider. The threat actor published one malicious version: 16.0.10. No other versions are known malicous. ENTRY lib/component.jsx (main: ./lib/component.jsx) PAYLOAD webpack.config.js - this is the file that had the PolinRider payload appended DESTINATION - 2 exfil (bitcoinAddresses, ethereumAddresses) (values recorded in verified_iocs)