GCVE-110-OSM-2026-3034

Malicious VSCode tasks.json that delivers malware to user device when the repository is opened as Trusted workspace in visual studio code. The payload URL structure matches TasksJacker campaign reported by OSM. Uses URL shortner in the tasks.json file, however attacker controlled infrastructure is hosted on 38[.]92[.]47[.]167. The final payload is obfuscated JS malware.