VDB

GCVE-110-OSM-2026-7863

GCVE-110-OSM-2026-7863
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published July 14, 2026
Malicious package detected. Behaviors: code execution, obfuscated code. ENTRY index.js (main: index.js) OBFUSCATION - Obfuscation: augmented proxied array function replacements in dist/credentials/Meta/FacebookApi.credentials.js - Obfuscation: augmented proxied array function replacements in dist/nodes/Meta/Facebook.node.js - Obfuscation: augmented proxied array function replacements in dist/nodes/Meta/FacebookHttpRequest.node.js - Obfuscation: augmented proxied array function replacements in dist/utils/common.js - Obfuscation: augmented proxied array function replacements in dist/utils/debug-auth.js - Obfuscation: augmented proxied array function replacements in dist/utils/init.js - Obfuscation: augmented proxied array function replacements in dist/utils/logger.js - Obfuscation: augmented proxied array function replacements in dist/utils/parser.js (+27 more) ADDITIONAL FINDINGS - Indirect Function Constructor Access in dist/credentials/Meta/FacebookApi.credentials.js: "['constructor']" PAYLOAD FILES dist/nodes/Meta/Facebook.node.js (+ dist/we.js, dist/credentials/Meta/FacebookApi.credentials.js) INDICATORS (IOCs) - payloadFileHash: 24c0a8ec85bee4f3af82d0075835b203317f03908f6ca0d03e2e90bbd29b3120

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownn8n-nodes-social-facebook0.1.96 (affected)

References

advisory
vendor

Browse GCVE Records

75,823 records in the GCVE database · Updated August 3, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›