VDB

GCVE-110-OSM-2026-6178

GCVE-110-OSM-2026-6178
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published June 18, 2026
Malicious package detected. Behaviors: data exfiltration. ENTRY dist/index.js (main: dist/index.js) DESTINATION - custom-c2: ip-api.com (primary, plaintext) in dist/collectors/enrichment.js - custom-c2: data.org (plaintext) in dist/collectors/enrichment.js EXFIL - Data Encoding for Exfiltration in dist/collectors/enrichment.js: "encodeURIComponent(publicIp)}?fields=status,isp,country,org,city,as" PAYLOAD FILES dist/collectors/enrichment.js INDICATORS (IOCs) - domains: enrichment.org - emails: libsc-reporter@....iam.gserviceaccount.com, libsc-service-account-785@libsc-499701.iam.gserviceaccount.com - payloadFileHash: 22c39d3a0a2083412b9391851d6d4513c6d087affe67470e4d92ede247053c97
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownlibsc-runtime-telemetryall (affected)—

Aliases

MAL-2026-6070

References

Malicious npm package: libsc-runtime-telemetry
advisory
advisory
vendor

Browse GCVE Records

72,921 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›