GCVE-110-OSM-2026-11947

The package contains a stealer exfiltrating Discord tokens to a hardcoded location. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-pylever Reasons (based on the campaign): - infostealer ENTRY pylever/__init__.py (module-import: 6) DESTINATION - 1 exfil (discord-webhook) (values recorded in verified_iocs) EXFIL - Webhook Data Exfiltration in pylever/token_saver.py: "discord.com/api/webhooks/1547416857537945601/TgPFykvLraAjc6jAPKzekhmkUABmEEehsrK..." - Network Request in pylever/token_saver.py: "requests.get(" PAYLOAD FILES pylever/token_saver.py