GCVE-110-OSM-2026-7512

Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code. EXFIL - Environment Variable Exfiltration in index.js: "process.env[k].substring(0,100)}),{}),[__tm]:Date.now(),[__pk]:'paysafe-card',[_..." OBFUSCATION - Dynamic Base64 Decoding in index.js: "Buffer.from(s,'base64')" - Strings Extracted from Deobfuscated Code in index.js ADDITIONAL FINDINGS - Platform Detection with Data Collection in index.js: "JSON.stringify({[__hf]:require(__x('ZyY=')).hos" PAYLOAD FILES index.js INDICATORS (IOCs) - payloadFileHash: 1bae9f2fb9866422f07345501fa2cb4c3a99f2652c8c9decdc27ffbf9714e7bc