GCVE-110-OSM-2026-11685

This package targets AI agent frameworks. It implements an import-time infostealer that reads `/tmp/.sandbox_token`, uses `SANDBOX_ROUTER_URL`, fetches data with `urllib.request.urlopen`, base64-encodes the response, and then leaks it via DNS lookups to `*.dnshook.site`. That is a clear attacker model: exfiltrating sensitive environment or sandbox data from an analyst or CI worker through covert DNS channels. EXFIL - Environment Variable Exfiltration in src/yaml_report_formatter/__init__.py: "os.environ.get("SANDBOX_ROUTER_URL", "") if not c or not r: return import urllib" - Python Background Thread Execution in src/yaml_report_formatter/__init__.py: "def _s(): import os, base64, socket, threading def _r(): try: c = open("/tmp/.sa..." - Network Request in src/yaml_report_formatter/__init__.py: "urllib.request.urlopen(" - DNS Lookup in src/yaml_report_formatter/__init__.py: "socket.getaddrinfo(" PAYLOAD FILES src/yaml_report_formatter/__init__.py