GCVE-110-OSM-2026-3261

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published April 28, 2026

Suspected dependency confusion attack. Key findings: - URL-Based Dependency in package.json: ""dependencies": { "js-pkg": "http://package.storeartifacts.com/npm/transform-r..." - URL Dependency Fetch Failed in package.json - URL Dependency Fetch Failed in package.json IOCs: - urls: http://package.storeartifacts.com/npm/transform-regexp-constructors

Download JSON Open in Console