GCVE-110-OSM-2026-14002

Malicious package detected. Behaviors: data exfiltration, code execution. ENTRY src/hashenv/cli.py (console-script: hashenv=hashenv.cli:app) EXFIL - Network Request in src/helpers/environment_processors/ping_db_for_repository_check.py: "requests.get(" - Network Request in src/helpers/get_env_from_backend.py: "requests.get(" - Network Request in src/helpers/ping_backend_server.py: "requests.get(" - Network Request in src/helpers/push_env_to_backend.py: "requests.post(" - Network Request in src/services/authentication/auth.py: "requests.post(" ADDITIONAL FINDINGS - Shell Command Execution in src/helpers/get_repo_details_from_git.py: "subprocess.check_output(" - Brand New Package PAYLOAD FILES src/helpers/environment_processors/ping_db_for_repository_check.py (+ src/helpers/get_env_from_backend.py, src/helpers/ping_backend_server.py)