GCVE-VVD-OSM-2026-837

This package is a malicious typo squatted attack that attempts to exfiltrate Oath data This attack uses a time-based trigger mechanism that activates only on the 15th of each month, creating a delay between installation and credential theft that helps evade immediate detection, complicates attribution by making it harder to trace the source of the leak, and ensures persistent access to potentially updated credentials through monthly execution.