VDB
GCVE-110-OSM-2026-3433
GCVE-110-OSM-2026-3433
Advisory PublishedCVSS 9.6/10
This is a contagious interview method where attacker has instructions to the candidate who interviewing to trigger the githooks in ReadME as instruction (Social Engineering involved).
Final Payload Delivers malware to the user device during pre-commit/post checkout operations
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | all (affected) | — |
References
Malicious package:
advisory
Browse GCVE Records
72,580 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.