VDB
GCVE-110-OSM-2026-101
GCVE-110-OSM-2026-101
Advisory PublishedCVSS 9.6/10
Malicious package detected. Behaviors: data exfiltration, code execution.
Entrypoint: spaysdata/main.py (console-script: spaysdata-run=spaysdata.main:main_entry)
Exfil: https://discord.com/api/webhooks/1513603677913616544/ZMLJ5SgW8My1s_jIHEkL9SlVSsT6dp73KEYKioBkcjKv20yWTLOT1iARD3wlgWN-mcTv (discord-webhook, recovery: plaintext in spaysdata/main.py)
Payload: spaysdata/main.py
Key findings:
- Webhook Data Exfiltration in spaysdata/main.py: "discord.com/api/webhooks/1513603677913616544/ZMLJ5SgW8My1s_jIHEkL9SlVSsT6dp73KEY..."
- Discord Token Theft in spaysdata/main.py: "discord\\Local Storage"
- Shell Command Execution in spaysdata/main.py: "os.system("
- Data Encoding for Exfiltration in spaysdata/main.py: "base64.b64encode("
IOCs:
- urls: https://discordapp.com/api/v6/users/@me
- domains: discordapp.com
- discordWebhooks: https://discord.com/api/webhooks/1513603677913616544/ZMLJ5SgW8My1s_jIHEkL9SlVSsT6dp73KEYKioBkcjKv20yWTLOT1iARD3wlgWN-mcTv
- payloadFileHash: 239a724d7a0090bc1f6f418b63229fcb9c924e06e3fe21c5a3703528164177ad
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | vision-service-python-client | all (affected), all (affected), all (affected), all (affected), all (affected), * (affected), all (affected) | — |
| unknown | @validator-lut-sdk/v3 | all (affected) | — |
| unknown | efghr-honeybee-sdk | all (affected), all (affected), * (affected), * (affected) | — |
| unknown | litellm | 1.82.7-1.82.8 (affected), 1.82.7-1.82.8 (affected), 1.82.7-1.82.8 (affected), 1.82.7-1.82.8 (affected) | — |
| unknown | spaysrbx | all (affected) | — |
Browse GCVE Records
72,148 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.