GCVE-110-OSM-2026-5208

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published June 2, 2026

Malicious package detected. Behaviors: code execution, obfuscated code. Entrypoint: index.ts (main: index.ts) Payload: index.ts Key findings: - Global Variable Shadowing in index.ts: "var process = {" - Dynamic Code Execution in index.ts: "exec(str1)" IOCs: - urls: https://telegram.me/grammyjs - domains: ctx.me, telegram.me - payloadFileHash: 12809e5d349ad1992bd87a986f3cb54fd9d9a5aedd71d18452909c5be104feeb

Download JSON Open in Console