GCVE-110-OSM-2026-5862

Malicious package detected. Behaviors: code execution, obfuscated code, install-time execution. Entrypoint: install-hook.js (install-hook: node install-hook.js) Payload: install-hook.js Key findings: - Shell Command Execution in install-hook.js: "require('child_process')" - Silent Process Execution in install-hook.js: "windowsHide: true" - Install Hook Executes Local JS File in package.json: ""postinstall": "node install-hook.js"" - Brand New Package - Rapid Version Publishing IOCs: - payloadFileHash: 813b5ca7bfb7de9a2d6f83635f13faaa51166d5caaefca56237bf55dc233f8d8