GCVE-110-OSM-2026-10775

The package provides Telegram-based remote access to the machine it runs on. It was deliberately created and used to hack other machines, exfiltrate files and credentials. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-08-httpz-requests Reasons (based on the campaign): - files-exfiltration - rat - persistence - uses-telegram-bot - obfuscation - native-extension ENTRY src/infogram/cli.py (console-script: infogram=infogram.cli:main) ADDITIONAL FINDINGS - Shell Command Execution in src/infogram/core.py: "subprocess.check_output(" - Rapid Version Publishing PAYLOAD FILES src/infogram/core.py (+ src/infogram/handlers.py)