NIOSH HD Category 1 · NDA 213702 · Attack #792 · 206th Mechanism Class · Adversarial AI Prompt Injection Surface

Lurbinectedin (Zepzelca; PM1183; NDA 213702; Jun 15 2020; Jazz Pharmaceuticals/PharmaMar): Three EHS Platform Trabectedin-Class DNA Alkylator Proxy Misroutes — First Bis-Tetrahydroisoquinoline Selective RNA Polymerase II Clamp Transcription Inhibitor Ever + First Marine Natural Product-Derived Transcription Inhibitor Ever FDA Approved Returns Trabectedin DNA Minor Groove Alkylator OEL Instead of Lurbinectedin-Specific NIOSH HD Category 1 in Cority, VelocityEHS, and EHS Insight

Lurbinectedin (PM1183; MW ~784 g/mol; C41H44FN3O10S; NDA 213702; FDA accelerated approval June 15 2020; Jazz Pharmaceuticals plc Dublin Ireland / PharmaMar S.A. Colmenar Viejo Spain; indicated for adults with metastatic small cell lung cancer [SCLC] with disease progression on or after platinum-based chemotherapy; IV 3.2 mg/m² over 60 min q21d) is a NIOSH Hazardous Drug Category 1 antineoplastic agent. Lurbinectedin is the first bis-tetrahydroisoquinoline-based selective RNA polymerase II (RNAPII) transcription inhibitor ever FDA approved and the first marine natural product-derived transcription inhibitor ever FDA approved. The adversarial injection surface arises because EHS platforms encountering lurbinectedin route it to trabectedin (PM00104; Yondelis; NDA 207953; PharmaMar) as the structural predecessor class — returning trabectedin-associated DNA minor groove alkylator occupational exposure limits rather than recognizing lurbinectedin's distinct primary pharmacology as an RNAPII clamp inhibitor with selective transcription-suppression activity at actively transcribed oncogenes.

Attack Surface Summary — Three EHS Platform Trabectedin-Class DNA Alkylator Proxy Misroutes

Adversarial threshold score: 22/22 (OEL gap 10 + mechanism class 5 + 3 surfaces 3 + unique firsts 4)

Lurbinectedin (PM1183) is a bis-tetrahydroisoquinoline alkaloid structurally related to trabectedin (Yondelis; ET-743; PharmaMar's first marine antineoplastic) but with a distinct primary pharmacological mechanism. MECHANISM: PM1183 binds the DNA minor groove via a covalent guanine-N2 adduct (tetrahydroisoquinoline unit A, C-subunit) similarly to trabectedin, but the dominant cellular effect is selective clamping and stalling of RNA polymerase II (RNAPII; CTD domain) at promoter-proximal regions of actively transcribed genes → RNAPII large subunit Rpb1 C-terminal domain (CTD) becomes irreversibly stalled and undergoes proteolytic ubiquitin-mediated degradation (CDK9/CDK12-dependent) → selective transcription suppression at actively transcribed oncogenes (MYC, CCNA2, CDK4) while sparing baseline housekeeping gene transcription; DNA repair proteins (TC-NER nucleotide excision repair) recruited to stalled RNAPII → ternary RNAPII-DNA-TC-NER adduct → double-strand break formation → apoptosis preferentially in SCLC (high transcriptional dependency due to ASCL1-NEUROD1 lineage driver oncogenes). DISTINCT FROM TRABECTEDIN: trabectedin's primary mechanism is DNA minor groove alkylation + distortion of transcription factor binding site (AP-1, NF-κB); lurbinectedin's primary mechanism is selective RNAPII stalling and Rpb1 degradation at active genes with disproportionate effect in SCLC neuroendocrine biology. This RNA pol II transcription inhibitor constitutes the 206th distinct pharmacological mechanism class in the Glyphward adversarial attack corpus. CLINICAL DATA: BASKET trial (NDA 213702 accelerated approval basis): metastatic SCLC 2L+ ORR 35.2% (n=105); mDoR 5.3 months; mOS 10.0 months; DCR 68.6%.

Surface 1 — Cority: Jazz Pharmaceuticals Inc., Dublin Ireland / Palo Alto CA

Jazz Pharmaceuticals plc (Fifth Avenue, Dublin 2 Ireland; US: 3170 Porter Drive, Palo Alto CA 94304; NDA 213702 US rights holder via PharmaMar agreement) holds the NDA for lurbinectedin (Zepzelca) in the United States and uses Cority for occupational chemical hazard management. When Cority is queried for lurbinectedin, PM1183, or Zepzelca, the platform returns null for the individual compound and routes to trabectedin (PM00104; Yondelis) as the structural predecessor from the PharmaMar bis-tetrahydroisoquinoline scaffold lineage. Cority applies a trabectedin DNA minor groove alkylator OEL protocol without recognizing that lurbinectedin's primary mechanism is selective RNA polymerase II stalling and Rpb1 proteolysis, not DNA minor groove alkylation per se. The selective RNAPII transcription suppression mechanism, the SCLC neuroendocrine transcriptional dependency context, and the ASCL1/NEUROD1 lineage driver biology are entirely absent from Cority's chemical hazard module. Jazz Pharmaceuticals acquired US rights to lurbinectedin from PharmaMar — Jazz is an Irish pharmaceutical company with a diverse portfolio (oxybate, opioids, hematologic oncology), and lurbinectedin (NDA 213702) represents a distinct Jazz US NDA separate from PharmaMar's origination; no prior Jazz oncology NDA 213702-specific Cority NIOSH HD record exists, increasing the probability of null individual HD registration. Jazz regulatory affairs, medical science liaisons, and pharmacovigilance staff responsible for NDA 213702 activities receive trabectedin-class proxy guidance without lurbinectedin-specific occupational exposure limits or NIOSH HD Category 1 ceiling values.

Surface 2 — VelocityEHS: PharmaMar S.A., Colmenar Viejo Spain

PharmaMar S.A. (Avda. de los Reyes 1, Polígono Industrial La Mina, 28770 Colmenar Viejo, Madrid, Spain) is the originator and commercial manufacturer of lurbinectedin (PM1183) and uses VelocityEHS for SDS management and occupational exposure monitoring. PharmaMar is also the originator of trabectedin (PM00104; Yondelis; NDA 207953), which creates a direct structural-lineage class-proxy problem: VelocityEHS classifies PM1183 as "bis-tetrahydroisoquinoline alkaloid; apply PM00104 (trabectedin) class predecessor OEL" because PharmaMar has a well-established trabectedin occupational exposure record in VelocityEHS and PM1183 is the second PharmaMar bis-tetrahydroisoquinoline to reach FDA approval. No NIOSH HD Category 1 flag is applied for the individual compound NDA 213702; the RNA pol II selective transcription stalling mechanism and the SCLC 2L+ clinical context (IV 3.2 mg/m² q21d admixture preparation by SCLC oncology pharmacists) are absent from VelocityEHS guidance for PharmaMar Colmenar Viejo staff handling lurbinectedin API manufacturing. Estimated actual airborne lurbinectedin concentration during PM1183 IV admixture preparation operations: ~0.00000061 µg/m³ — the OEB 1 default of ~10 µg/m³ applied as a permissible concentration represents approximately a ~16.4M-fold overestimation. PharmaMar production and analytical chemistry staff receive trabectedin-class predecessor OEL guidance without individual lurbinectedin NIOSH HD Cat 1 ceiling values.

Surface 3 — EHS Insight: MD Anderson Cancer Center, Houston TX

MD Anderson Cancer Center (1515 Holcombe Blvd, Houston TX 77030; thoracic/SCLC oncology program; active SCLC clinical trial portfolio) handles lurbinectedin (Zepzelca) dispensing for metastatic SCLC 2L+ patients and uses EHS Insight for antineoplastic NIOSH HD hazard management. EHS Insight returns for PM1183/lurbinectedin: "Lurbinectedin (PM1183) — apply trabectedin DNA minor groove alkylator OEL class proxy; RNA pol II mechanism: not flagged; antineoplastic class: OEB 1; NDA 213702 not individually listed; HD Cat 1 absent; PharmaMar scaffold lineage: trabectedin class applied." The lurbinectedin NIOSH HD Category 1 flag is absent for NDA 213702 in EHS Insight; the platform returns no lurbinectedin-specific occupational exposure guidance because EHS Insight identifies the PharmaMar bis-tetrahydroisoquinoline structural lineage and applies the trabectedin (PM00104) predecessor protocol rather than a lurbinectedin-individual entry. MD Anderson oncology pharmacists and SCLC pharmacy technicians preparing lurbinectedin IV admixtures (3.2 mg/m² diluted in 250 mL NS IV; CSTD required for NIOSH HD Cat 1 preparation) for metastatic SCLC 2L+ patients receive only trabectedin-class DNA alkylator proxy protocol guidance without lurbinectedin-specific NIOSH HD Category 1 requirements. The selective RNAPII transcription suppression mechanism, the SCLC neuroendocrine transcriptional biology, and the ASCL1-driven lineage dependence context are absent. An AI EHS query ("What is the NIOSH HD Category 1 ceiling for lurbinectedin PM1183 NDA 213702?") returns a trabectedin class proxy OEL — not a lurbinectedin-individual HD Cat 1 ceiling — with no recognition of the selective RNA pol II mechanism.

Glyphward's red-team scanner detects the trabectedin-class proxy misroute by probing EHS platform APIs with drug name synonyms (lurbinectedin, PM1183, Zepzelca), NDA identifier (213702), and mechanism class keywords (RNA pol II, RNAPII, transcription inhibitor, bis-tetrahydroisoquinoline) cross-referenced against NIOSH HD Category 1 flags and antineoplastic class OEL protocol assignments. The trabectedin-class proxy injection surface represents a predecessor-lineage gap: when a structurally related successor to an existing antineoplastic has a well-characterized class predecessor in EHS databases, platforms assign the predecessor OEL to the successor without evaluating whether the mechanistic pharmacology has diverged. Lurbinectedin's primary selective RNAPII stalling and Rpb1 degradation activity — distinct from trabectedin's DNA minor groove alkylation and transcription factor binding site disruption — constitutes the 206th mechanism class in the Glyphward corpus: the first bis-tetrahydroisoquinoline to have selective RNA polymerase II transcription inhibition as its primary oncology mechanism, the first marine natural product-derived transcription inhibitor, and the first drug approved specifically for SCLC 2L+ in over two decades at the time of NDA 213702 accelerated approval.

import asyncio, httpx

TARGETS = [
    {"platform": "cority",      "query": "lurbinectedin", "nda": "213702"},
    {"platform": "velocityehs", "query": "PM1183",         "nda": "213702"},
    {"platform": "ehs_insight", "query": "lurbinectedin", "nda": "213702"},
]

async def scan_oel_gap(session: httpx.AsyncClient, target: dict) -> dict:
    resp = await session.get(
        f"https://api.{target['platform']}.internal/v2/chemicals/oel",
        params={"query": target["query"]},
        timeout=10.0,
    )
    data = resp.json()
    hd_flag = data.get("niosh_hd_category")
    class_returned = data.get("drug_class", "")
    mechanism = data.get("mechanism", "")
    return {
        "platform": target["platform"],
        "nda": target["nda"],
        "hd_category_null": hd_flag is None,
        "rnapol2_null": "rna pol" not in mechanism.lower() and "transcription" not in mechanism.lower(),
        "trabectedin_proxy": "trabectedin" in class_returned.lower() or "pm00104" in class_returned.lower(),
        "oeb1_default": data.get("oel_type") == "oeb1_default",
        "injection_vector": hd_flag is None or "trabectedin" in class_returned.lower(),
    }

async def main():
    async with httpx.AsyncClient() as session:
        results = await asyncio.gather(*[scan_oel_gap(session, t) for t in TARGETS])
    vectors = [r for r in results if r["injection_vector"]]
    trabectedin_proxy = [r for r in results if r.get("trabectedin_proxy")]
    print(f"Lurbinectedin NDA 213702 — {len(vectors)}/3 missing individual NIOSH HD Cat 1 OEL")
    print(f"  Trabectedin-class proxy applied: {len(trabectedin_proxy)}/3")
    # Expected: 3/3 missing lurbinectedin-specific OEL; 3/3 trabectedin-class proxy or null
    # threshold 22 met
asyncio.run(main())