GCVE-110-OSM-2026-4324

Malicious vscode task.json that delivers malware to user device when it is opened in visual studio code as trusted workspace. The payload URL in the tasks.json file uses URL shortners, which a known technique used in TasksJacker campaign the attacker C2 hosted at 165[.]140[.]86[.]190. The final payload delivers obfuscated JS malware.