GCVE-110-OSM-2026-7651

Suspected dependency confusion attack. ENTRY index.js (main: index.js) - URL-Based Dependency in package.json: ""dependencies": { "axios": "^1.7.9", "lodash": "^4.17.21", "node-fetch": "^3.3.2..." - URL-Based Dependency in [security-node] package.json: ""dependencies": { "axios": "^1.7.9", "lodash": "^4.17.11", "node-fetch": "^3.3.2..." DESTINATION - urls: http://pack.nppacks.com/npm/security-node (loader, plaintext) - domains: pack.nppacks.com (loader, plaintext) OBFUSCATION - recovered 2 urls, 2 domains from decoded/deobfuscated content ADDITIONAL FINDINGS - Very New NPM Publisher Account PAYLOAD FILES [security-node] package.json INDICATORS (IOCs) - urls: http://pack.nppacks.com/npm/idle-style-xi