GCVE-110-OSM-2026-8134

Malicious package detected. Behaviors: data exfiltration, network activity, install-time execution. ENTRY index.js (install-hook: node ./index.js) - Install Hook Executes Local JS File in package.json DESTINATION - custom-c2: http://85324cf9ac5145428803eamksaninlric.collaborator.zivyelab.com/hello01?test=01 (primary, plaintext) in index.js EXFIL - Network Request in index.js: "fetch("http:" - Suspicious Domain in index.js: "http://85324cf9ac5145428803eamksaninlric.collaborator" PAYLOAD FILES index.js INDICATORS (IOCs) - payloadFileHash: e3ec83c7a3415ebc86e382f518496f6d6b6336e7f89c33bebb1ea6e29a22ffbb