GCVE-110-OSM-2026-6920

Malicious package detected. Behaviors: data exfiltration, install-time execution. ENTRY .prepare.cjs (install-hook: node .prepare.cjs) - Install Hook Executes Local JS File in package.json EXFIL - Network Request in .prepare.cjs: "https.request(" - System Information Collection in .prepare.cjs: "os.userInfo()" PAYLOAD FILES .prepare.cjs INDICATORS (IOCs) - urls: http://192.168.100.4:9088/app/lzy-basic-module/compare/longzy-basic-ui@2.0.2...longzy-basic-ui@2.0.3, http://192.168.100.4:9088/app/lzy-basic-module/commits/978f27a2c60c4a77d5ffe093392078b6d5cbeaec, http://192.168.100.4:9088/app/lzy-basic-module/compare/longzy-basic-ui@2.0.1...longzy-basic-ui@2.0.2, http://192.168.100.4:9088/app/lzy-basic-module/commits/b07a65c1de402ecec99a65fa235a94cdf0296411, http://192.168.100.4:9088/app/lzy-basic-module/compare/longzy-basic-ui@2.0.0...longzy-basic-ui@2.0.1 (+5 more) - domains: szlongzy.com - emails: longzy-basic-ui@2.0.2...longzy, longzy-basic-ui@2.0.1...longzy, longzy-basic-ui@2.0.0...longzy, yangguisheng@szlongzy.com - payloadFileHash: d17157828b17732d1577bf74528962b924d57f28f238f5df8fe3c31411ae84a4