GCVE-110-OSM-2026-8523

Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code. EXFIL - Environment Variable Exfiltration in index.js: "process.env[k].substring(0,100)}),{}),[__tm]:Date.now(),[__pk]:'paysafe-payments..." OBFUSCATION - Dynamic Base64 Decoding in index.js: "Buffer.from(s,'base64')" - Deobfuscation Failed in index.js ADDITIONAL FINDINGS - Platform Detection with Data Collection in index.js: "JSON.stringify({[__hf]:require(__x('77A=')).hos" PAYLOAD FILES index.js INDICATORS (IOCs) - payloadFileHash: 3a0dd3479eaf85b65e5abd63d6451f98506faddee47cf4bebd9f91296abb29f0