GCVE-110-OSM-2026-10781

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published August 7, 2026

Malicious package detected. Behaviors: obfuscated code. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py OBFUSCATION - Decoded Base64 Content in setup.py - Base64 Encoded Payload in setup.py: "'aW1wb3J0IG9zLCBwbGF0Zm9ybSwgc3VicHJvY2VzcywgdGVtcGZpbGUsIHVybGxpYi5yZXF1ZXN0Cml..." - recovered 1 urls from decoded/deobfuscated content ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={'install'" PAYLOAD FILES setup.py

Download JSON Open in Console