VDB

GCVE-110-OSM-2026-13953

GCVE-110-OSM-2026-13953
Advisory PublishedCVSS 5.4/10
Vulnetix · Advisory published October 21, 2026
This package is part of an ongoing threat campaign that uses Cloudflare Turnstile to redirect victims to web pages that the attacker wants them to go to. This package comes with a small package.json and an index.html file that pulls the URL redirected to from a keyval.org json blob. ADDITIONAL FINDINGS - Brand New Package - Publisher Has Other Malicious Packages - Rapid Version Publishing

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
unknown@worrisome/aaaaall (affected)—

References

advisory
vendor

Browse GCVE Records

816 records in the GCVE database · Updated November 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›