GCVE-110-OSM-2026-14035

Repository infected with the PolinRider malware campaign. A project file in the repository contains an obfuscated JavaScript payload matching the PolinRider signature. Running, building or forking the project may execute the payload on the developer's machine. Malicious payload found in: `frontend/tailwind.config.js` - Detection: the file contains the PolinRider loader signature, a global-scope `require` alias followed by a `typeof module` check against an obfuscated string-table lookup. Confirmed by a regex match against the raw file at the commit in the evidence link. - Placement: the payload is in an ordinary project configuration or source file rather than a disguised asset. - Not determined: the payload was not decoded in this report, so the second stage and C2 are not enumerated.