GCVE-110-OSM-2026-3431

Malicious VSCode task.json file that delivers malware when the user opens the repo as a trusted workspace in visual studio code. The payload URL in tasks.json uses URL shortner to hide attacker C2 165[.]140[.]86[.]190, this aligns with existing behavior reported by OSM in the TasksJacker campaign. The final payload delivers infostealer malware.