GCVE-VVD-OSM-2026-632

Malicious package detected. Behaviors: data exfiltration. Payload: lib/uploader/document-uploader.ts Key findings: - Environment Variable Exfiltration in lib/uploader/document-uploader.ts: "process.env.LOG_LEVEL || 'info'; } private async createPreSignedPost(params:..." IOCs: - urls: https://aquasecurity.github.io/trivy-repo/deb/public.key, https://aquasecurity.github.io/trivy-repo/deb - domains: emil.de, aquasecurity.github.io - emails: email@emil.de, backend-developers@emil.de - payloadFileHash: 8ad79ee79bb7e721d6669b9ee8780fc583b257cb3702f062ff203e4964cf0284