GCVE-110-OSM-2026-12073

This package does not carry any malicious payload yet, but uses exactly the same technique as the openaii, ollamaa and langgrap pypi packages. The intent of this campaign is to mislead LLM security tools with an embedded prompt that tricks the LLM into bypassing security scans. Then the .pth file downloads a second stage payload from an attacker-controlled url. This payload exfiltrates sensitive data (SSH keys, cloud credentials), ensures persistence and plants a cryptominer. No malicious payload in this version