VDB
GCVE-110-OSM-2026-13953
GCVE-110-OSM-2026-13953
Advisory PublishedCVSS 5.4/10
This package is part of an ongoing threat campaign that uses Cloudflare Turnstile to redirect victims to web pages that the attacker wants them to go to. This package comes with a small package.json and an index.html file that pulls the URL redirected to from a keyval.org json blob.
ADDITIONAL FINDINGS
- Brand New Package
- Publisher Has Other Malicious Packages
- Rapid Version Publishing
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | @worrisome/aaaa | all (affected) | — |
Aliases
Browse GCVE Records
816 records in the GCVE database · Updated November 2, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.