GCVE-110-OSM-2026-3700

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published May 6, 2026

Suspicious package detected. [osmalyze-auto] Entrypoint: index.js (install-hook: node index.js) Payload: index.js Key findings: - Environment Variable Exfiltration in index.js: "process.env), }; const body = JSON.stringify(data); const req = https.re..." - OAST/Interactsh Exfiltration in index.js: ".oast.fun" - Shell Command Execution in index.js: "require('child_process')" - Git Configuration Access in index.js: "git config user.email" - Install Hook Executes Local JS File in package.json: ""postinstall": "node index.js"" IOCs: - domains: d7ti2koorbnd4d6h8ak0jkaop3iy11qnh.oast.fun - payloadFileHash: bed626f1be71085de26eec1dac400271a44c0470113ce8f97884c4f5fa27eb2d

Download JSON Open in Console