GCVE-110-OSM-2026-11256

Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. Category: PROBABLY_PENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, research & co, with clearly low-harm possibilities. Campaign: GENERIC-standard-pypi-install-pentest Reasons (based on the campaign): - The package contains code to exfiltrate basic data from the system, like IP or username. It has a limited risk. - The package overrides the install command in setup.py to execute malicious code during installation. Judge assessment: This package behaves like a dependency-confusion canary or research beacon rather than a normal library: `setup.py` runs `_beacon("install")` at install time and `src/flyteplugins/agento11y/__init__.py` repeats the same logic on import. The code collects hostname, username, and Python version, then performs DNS and HTTP requests to the plaintext OAST endpoint `i4nqdngoap6qxdae6oisidtlscy4m6av.oastify.com`, which is classic exfiltration infrastructure but is also explicitly described in the source comments as a "security-research canary" for responsible disclosure. Because the attacker model is ambiguous and the package self-identifies as a claimability demonstration with limited harm, I would not call this clearly malicious, but it is unquestionably not benign and should be manually reviewed before any submission. The OSV MAL advisory is directionally consistent with the observed behavior, but the self-declared pentest/research framing keeps this in the suspicious bucket. DESTINATION - 1 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - OAST/Interactsh Exfiltration in setup.py: "oastify.com" - OAST/Interactsh Exfiltration in src/flyteplugins/agento11y/__init__.py: "oastify.com" - System Information Exfiltration in setup.py: "socket.gethostname(), 30), "u-" + _san(getpass.getuser(), 16), "py-" + _san(plat..." - System Information Exfiltration in src/flyteplugins/agento11y/__init__.py: "socket.gethostname(), 30), "u-" + _san(getpass.getuser(), 16), "py-" + _san(plat..." - Network Request in setup.py: "urllib.request.urlopen(" - System Information Collection in setup.py: "socket.gethostname()" - DNS Lookup in setup.py: "socket.getaddrinfo(" - Suspicious Domain in setup.py: "oastify.com" (+4 more) PAYLOAD FILES setup.py (+ src/flyteplugins/agento11y/__init__.py)