VDB
GCVE-110-OSM-2026-7863
GCVE-110-OSM-2026-7863
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: code execution, obfuscated code.
ENTRY
index.js (main: index.js)
OBFUSCATION
- Obfuscation: augmented proxied array function replacements in dist/credentials/Meta/FacebookApi.credentials.js
- Obfuscation: augmented proxied array function replacements in dist/nodes/Meta/Facebook.node.js
- Obfuscation: augmented proxied array function replacements in dist/nodes/Meta/FacebookHttpRequest.node.js
- Obfuscation: augmented proxied array function replacements in dist/utils/common.js
- Obfuscation: augmented proxied array function replacements in dist/utils/debug-auth.js
- Obfuscation: augmented proxied array function replacements in dist/utils/init.js
- Obfuscation: augmented proxied array function replacements in dist/utils/logger.js
- Obfuscation: augmented proxied array function replacements in dist/utils/parser.js
(+27 more)
ADDITIONAL FINDINGS
- Indirect Function Constructor Access in dist/credentials/Meta/FacebookApi.credentials.js: "['constructor']"
PAYLOAD FILES
dist/nodes/Meta/Facebook.node.js (+ dist/we.js, dist/credentials/Meta/FacebookApi.credentials.js)
INDICATORS (IOCs)
- payloadFileHash: 24c0a8ec85bee4f3af82d0075835b203317f03908f6ca0d03e2e90bbd29b3120
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | n8n-nodes-social-facebook | 0.1.96 (affected) | — |
Aliases
Browse GCVE Records
75,823 records in the GCVE database · Updated August 3, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.