GCVE-110-OSM-2026-4066

[osmalyze-auto] Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code, install-time execution. [osmalyze-auto] Entrypoint: setup.mjs (install-hook: node setup.mjs) Exfil: http://filev2.getsession.org/file/ (custom-c2, recovery: plaintext in router_init.js) Payload: router_init.js Key findings: - Download Execute Delete Pattern in dist/adapters/codex.js: "writeFileSync(schemaPath, JSON.stringify(ctx.structuredOutput.jsonSchema)); ..." - Environment Variable Exfiltration in dist/cli/add/ensure-registries.js: "process.env.TASKFLOW_REGISTRY_URL ?? 'https://taskflow.sh/r'; const url = `$..." - Environment Variable Exfiltration in dist/cli/add/mcp.js: "process.env.TASKFLOW_REGISTRY_URL ?? process.env.REGISTRY_URL ?? DEFAULT_REGISTR..." - Environment Variable Exfiltration in dist/cli/add/search.js: "process.env.TASKFLOW_REGISTRY_URL ?? process.env.REGISTRY_URL ?? DEFAULT_REGISTR..." - Environment Variable Exfiltration in router_init.js: "process.env,_0x19c3dc=await _0x41cd85[_0x24a951(0x1e27)](fetch" IOCs: - urls: https://taskflow.sh/r/{name, https://taskflow.sh/schema/taskflow.json, https://registry.acme.com/r/{name, https://api.corp.com/taskflow/{name, https://taskflow.sh/schema/registry.json (+9 more) - domains: api.corp.com, filev2.getsession.org, slsa.dev, search.sigstore.dev, kubernetes.io - payloadFileHash: 2ec78d556d696e208927cc503d48e4b5eb56b31abc2870c2ed2e98d6be27fc96