GCVE-110-OSM-2026-7894

Malicious package detected. Behaviors: code execution. ENTRY dist/index.js (main: ./dist/index.js) DESTINATION - urls: https://pixeldrain.com/u/byLkaSJR (c2, plaintext) - domains: pixeldrain.com (c2, plaintext) ADDITIONAL FINDINGS - Silent Process Execution in dist/file.js: "stdio: 'ignore'" - Stream Response to Execution in dist/file.js: "createWriteStream } from 'node:fs'; import { chmod, mkdir } from 'node:fs/promis..." - Dynamic Code Execution in dist/parse.js: "exec(value)" - Rapid Version Publishing PAYLOAD FILES dist/parse.js (+ dist/file.js) INDICATORS (IOCs) - payloadFileHash: 549ede8ef2ceefca5f33a782c30c7fb802f32d27c78866edbcdffbd78e3574ef