GCVE-110-OSM-2026-4323

Malicious vscode tasks.json file that delivers malware via GitHooks, when the user opens the repository using visual studio code. Post checkout githook is triggered by tasks.json file. The initial C2 hosted at https[://]ninjacode-gitconfig-v1[.]vercel[.]app/settings/mac?token=6c1d60d35852ef0c05df At the time of this report, the said C2 url returning 404, however attacker host infrastructure is still active, not taken down by the hosting provider.