VDB
GCVE-110-OSM-2026-6651
GCVE-110-OSM-2026-6651
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: data exfiltration, code execution.
ENTRY
dist/index.cjs (main: ./dist/index.cjs)
DESTINATION
- urls: https://funnystore.org/lib/index.php (c2, plaintext)
- urls: https://funnystore.org/lib/index.php\ (c2, plaintext)
- domains: funnystore.org (c2, plaintext)
EXFIL
- System Information Collection in dist/vendor/supports-color/index.js: "process.platform"
ADDITIONAL FINDINGS
- Shell Command Execution in dist/index.cjs: "require("child_process")"
- Dynamic Code Execution in dist/vendor/original-color/index.cjs: "eval(Result)"
PAYLOAD FILES
dist/vendor/original-color/index.cjs (+ dist/vendor/original-color/index.js, dist/vendor/supports-color/index.js)
INDICATORS (IOCs)
- payloadFileHash: 9faf80b37a3d9554bbe8b3ff443a6a114ce7c29ead29deaef766f2701cc52243
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | chlklib | 1.2.3 (affected) | — |
Aliases
Browse GCVE Records
72,337 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.