GCVE-110-OSM-2026-10098

This looks like a dependency-confusion or burner-package implant that exfiltrates host data during install via a custom `egg_info` hook. The `setup.py` code collects `socket.gethostname()`, `os.getcwd()`, and `getpass.getuser()`, URL-encodes them, and sends them to a hardcoded Interactsh/OAST endpoint `fpvbsifkklbmklusmxby2405wa7x7x5bf.oast.fun`, which is classic attacker-controlled callback infrastructure. The attacker model is credential or environment reconnaissance from a malicious PyPI package published under the misleading name `atlas-internal`, and the behavior is consistent with intentional data theft rather than a false-positive build helper. The static score, OAST exfiltration, and install-time command override all converge on confirmed malicious intent. DESTINATION - 3 exfil (oast, custom-c2) (values recorded in verified_iocs) EXFIL - OAST/Interactsh Exfiltration in setup.py: ".oast.fun" - System Information Exfiltration in setup.py: "socket.gethostname(), 'cwd': os.getcwd(), 'username': getpass.getuser(), }) # oa..." - HTTP Data Exfiltration in setup.py: "socket.gethostname(), 'cwd': os.getcwd(), 'username': getpass.getuser(), }) # oa..." - Network Request in setup.py: "urllib.request.urlopen(" - System Information Collection in setup.py: "socket.gethostname()" - Suspicious Domain in setup.py: "oast.fun" ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={'egg_info'" PAYLOAD FILES setup.py