GCVE-110-OSM-2026-3432

Malicious VSCode tasks.json that delivers malware to user device, when the repository is cloned and opened in visual studio code. This tasks.json file uses URL-shortner to hide the attacker controlled C2, but this indicator has been reported by OSM in TasksJacker campaign where the final payload delivers malware infostealer.