GCVE-110-OSM-2026-14107

During installation, package downloads and executes malware. Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-10-semvver Reasons (based on the campaign): - Downloads and executes a remote executable. - malware - typosquatting ADDITIONAL FINDINGS - Shell Command Execution in setup.py: "subprocess.Popen(" - Silent Process Execution in setup.py: "stdout=subprocess.DEVNULL" PAYLOAD FILES setup.py