GCVE-110-OSM-2026-1429

This repository contains malicious VSCode tasks.json file that executes on a user device if the repository is opened as trusted workspace in Visual Studio Code. In addition, attacker has a fail safe code disguised as tailwind.config.js file which includes obfuscated JS malware. There are two types of payloads one is in the tasks.json file and the fail safe payload is in the tailwind.config.json. The tailwind.config.js exhibits the beavertail malware variant. Note that the attacker controlled URL in the tasks.json is no longer active.