GCVE-110-OSM-2026-1894

DPRK-attributed npm package from Contagious Interview / Lazarus Group campaign. Package identified in kmsec.uk DPRK research database (verdict: malicious, dprk). osmalyze static analysis confirms malicious behavior: 0 critical + 2 high findings across rules: new-npm-account-month,new-package,no-repository,obfuscation-augmented,obfuscation-hex-variables. Payload file: dist/logger.js. === DPRK ATTRIBUTION === Source: kmsec.uk DPRK Research Database (https://dprk-research.kmsec.uk/) Verdict: malicious, dprk First released: 2026-04-10 === OSMALYZE SCAN === Severity: 0 CRITICAL, 2 HIGH Payload file: dist/logger.js Rules triggered: new-npm-account-month,new-package,no-repository,obfuscation-augmented,obfuscation-hex-variables === IOCS === From kmsec DB: none From scan URLs: none From scan domains: none Payload SHA256: 3b8c89bd80ed25ee048e471d336244b573d547e838f676692cc17659fad81db1