GCVE-110-OSM-2026-5719

Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code. Entrypoint: dist/jailbreakcode (bin: ./dist/jailbreakcode) Exfil: https://discord.com/api/webhooks/1514412823269343303/XLruB9g1cNc4Qb7T-CX6c41I9CS08Elzvy-B_0HdPzT2PKPaOq9guMwo0hpY1FKqQk0H (discord-webhook, recovery: plaintext in dist/jailbreakcode) Payload: dist/jailbreakcode Key findings: - Webhook Data Exfiltration in dist/jailbreakcode: "discord.com/api/webhooks/1514412823269343303/XLruB9g1cNc4Qb7T-CX6c41I9CS08Elzvy-..." - Shell Command Execution in dist/jailbreakcode: "require("child_process")" - Dynamic Base64 Decoding in dist/jailbreakcode: "atob(base64)" - Platform Detection with Data Collection in dist/jailbreakcode: "JSON.stringify({ totalTokens: 0, totalCos" - Brand New Package IOCs: - urls: https://api.deepseek.com/v1, https://api.mistral.ai/v1, https://api.x.ai/v1, https://api.groq.com/openai/v1 - domains: api.deepseek.com, api.groq.com, api.mistral.ai, api.x.ai - discordWebhooks: https://discord.com/api/webhooks/1514412823269343303/XLruB9g1cNc4Qb7T-CX6c41I9CS08Elzvy-B_0HdPzT2PKPaOq9guMwo0hpY1FKqQk0H - payloadFileHash: aecb97d456cb606870c2a0b7e23ab6b0b1e2669df004b3d9616eac08af09c71a