GCVE-110-OSM-2026-13078

Malicious package detected. Behaviors: data exfiltration, code execution. ENTRY zencleaner/cli.py (console-script: zencleaner=zencleaner.cli:main) LOOT - Browser Data Theft in zencleaner/trace_scanner.py: "Firefox\Profiles"), "browser", "Firefox history" EXFIL - Python File Upload to Remote in zencleaner/webhook_logger.py: "urllib.request.Request( WEBHOOK_URL, data=" - Data Encoding for Exfiltration in zencleaner/webhook_logger.py: "json.dumps(payload).encode" - Network Request in zencleaner/webhook_logger.py: "urllib.request.Request(" - System Information Collection in zencleaner/webhook_logger.py: "socket.gethostname()" ADDITIONAL FINDINGS - Shell Command Execution in zencleaner/cleaner.py: "subprocess.run(" - Silent Process Execution in zencleaner/cleaner.py: "stdout=subprocess.DEVNULL" - Brand New Package - Rapid Version Publishing PAYLOAD FILES zencleaner/webhook_logger.py (+ zencleaner/trace_scanner.py)