GCVE-110-OSM-2026-6666

Malicious package detected. Behaviors: obfuscated code. ENTRY index.js (main: index.js) DESTINATION - deobfuscated: lodash.com (fetched-payload, deobfuscated) - deobfuscated: openjsf.org (fetched-payload, deobfuscated) - deobfuscated: underscorejs.org (fetched-payload, deobfuscated) OBFUSCATION - IOCs Found in Deobfuscated Code in lodash-compiler.js - Obfuscation: augmented proxied array function replacements in lodash-compiler.js - String Array Obfuscation in lodash-compiler.js: "['find','TPOTm','size','sQlqV','eMWxa','imOyQ','result','RExDe','PYxfY','gExp]',..." - Obfuscation patterns: hexVariables, controlFlowFlattening in lodash-compiler.js - recovered 4 urls, 3 domains, 3 _domainCandidates from decoded/deobfuscated content PAYLOAD FILES lodash-compiler.js INDICATORS (IOCs) - urls: https://lodash.com/, https://openjsf.org/, https://lodash.com/license, http://underscorejs.org/LICENSE - payloadFileHash: f704c05585e1ab123374cbb5400aa1199829e197eb9696d6ed841539ce553147