GCVE-110-OSM-2026-3470

Malicious VSCode tasks.json that delivers malware to user device, when the repository is opened as trusted workspace on visual studio code. The payload URL uses URL shortner that aligns with the TasksJacker campaign reported by OSM. The attacker C2 is hosted at 165[.]140[.]86[.]190, the final payload delivers infostealer malware.