GCVE-110-OSM-2026-4545

[osmalyze-auto] Suspected dependency confusion attack. Behaviors: data exfiltration, code execution, network activity, install-time execution. [osmalyze-auto] Entrypoint: index.js (main: index.js) Key findings: - Environment Variable Exfiltration in package.json: "process.env.COMPANY||'Check IP WHOIS', ip_address:ip, package_name:'private-next..." - OAST/Interactsh Exfiltration in package.json: ".oast.fun" - Shell Command Execution in package.json: "require('child_process')" - System Information Exfiltration in package.json: "os.hostname(), current_path:process.cwd(), command_output:o+r }; const postData=..." - HTTP Data Exfiltration in package.json: "os.hostname(), current_path:process.cwd(), command_output:o+r }; const postData=..." IOCs: - domains: lszakfghwnvxspyfcmaabd1css99rnq3w.oast.fun