GCVE-VVD-OSM-2026-628

Malicious package detected. Behaviors: data exfiltration, install-time execution. Payload: index.js Key findings: - Environment Variable Exfiltration in index.js: "process.env)).toString('base64'); const payload = JSON.stringify({ content: `\`..." - Platform Detection with Data Collection in index.js: "JSON.stringify({ content: `\`\`\`json\n${env}\n\`\`\`` }); const req = https.re..." IOCs: - domains: disposable.io - emails: grey@disposable.io - payloadFileHash: 742b27223a8bbb2594b459f0bfbdb19b6b1e13db5c5fb89eeb3e69f9304e6b90