VDB
GCVE-110-OSM-2026-1897
GCVE-110-OSM-2026-1897
Advisory PublishedCVSS 9.6/10
DPRK-attributed npm package from Contagious Interview / Lazarus Group campaign. Package identified in kmsec.uk DPRK research database (verdict: malicious, dprk). osmalyze static analysis confirms malicious behavior: 0 critical + 1 high findings across rules: new-npm-account-week,new-package,single-version. Payload file: index.js.
=== DPRK ATTRIBUTION ===
Source: kmsec.uk DPRK Research Database (https://dprk-research.kmsec.uk/)
Verdict: malicious, dprk
First released: 2026-04-09
=== OSMALYZE SCAN ===
Severity: 0 CRITICAL, 1 HIGH
Payload file: n/a
Rules triggered: new-npm-account-week,new-package,single-version
=== IOCS ===
From kmsec DB: none
From scan URLs: none
From scan domains: none
Payload SHA256: n/a
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | big-numer | all (affected) | — |
Browse GCVE Records
72,921 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.