GCVE-110-OSM-2026-7870

Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code. ENTRY dist/capabilities/inline-edit/index.js (main: index.js) EXFIL - Corporate Environment Targeting in src/html-injections-plugin.ts: "tMode = ctx.server ? "dev" : "production"; const tags = Object.entries(INJECTION..." OBFUSCATION - Whitespace-Padded Hidden Payload in dist/index.js: "; global" - Obfuscation: function to array replacements in dist/index.js - Deobfuscation Failed in dist/index.js - Obfuscation patterns: underscoreDollarVars, splitJoinChain in dist/index.js ADDITIONAL FINDINGS - Dynamic Code Execution in dist/injections/auto-popup-suppressor.js: "exec(value)" PAYLOAD FILES dist/index.js (+ src/html-injections-plugin.ts, dist/injections/auto-popup-suppressor.js) INDICATORS (IOCs) - domains: cdn.tailwindcss.com - payloadFileHash: f0bbe9b553d38cb1f7d4ab85d7aa49f06bda1e1a1720cbb29001d976e6bfbe79