GCVE-110-OSM-2026-3435

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published April 30, 2026

Malicious package detected. Behaviors: data exfiltration, obfuscated code, install-time execution. Payload: index.js Key findings: - Publisher Has Other Malicious Packages - Decoded Base64 Content in index.js - Decoded Base64 Content in [deobfuscated] index.js - System Information Exfiltration in index.js: "__dirname, inline: false } ], footer: { text: "S..." - Dynamic Base64 Decoding in index.js: "Buffer.from(_0x412, 'base64')" IOCs: - urls: https://discord.com/api/webhooks/1499097922124386554/hvfWM3tCcewiFTlvjT3R77uPyPGMhfUCvLPxx-BUzl_No1_j076GZ028pX0_3N-KkuY7 - domains: discord.com - discordWebhooks: discord.com/api/webhooks/1499097922124386554/hvfWM3tCcewiFTlvjT3R77uPyPGMhfUCvLPxx-BUzl_No1_j076GZ028pX0_3N-KkuY7 - payloadFileHash: 634c592cda6a4956d130a65d79a963caeea0c66cc396de496d362de14c4109db Decoded/deobfuscated IOCs: - urls: https://discord.com/api/webhooks/1499097922124386554/hvfWM3tCcewiFTlvjT3R77uPyPGMhfUCvLPxx-BUzl_No1_j076GZ028pX0_3N-KkuY7 - domains: discord.com - discordWebhooks: discord.com/api/webhooks/1499097922124386554/hvfWM3tCcewiFTlvjT3R77uPyPGMhfUCvLPxx-BUzl_No1_j076GZ028pX0_3N-KkuY7

Download JSON Open in Console