GCVE-110-OSM-2026-14378

In this campaign, specific versions of involved affected packages hide malicious actions. The malicious code is hidden in specific versions of a dependency (is-it-ai), intentionally pinned by specific versions of dependent packages. All package versions were uploaded with malicious intention; the ones without malicious references are clearly intendent only to hide a cover for the rest. When triggered, the malicious action fingerprints the environment and contacts the remote server. If it responds with an URL, it will be downloaded and executed. Versions 0.1.0 and 0.1.3 are benign decoys. Version 0.1.1 of the package implements a three-stage attack: it collects system fingerprint data (platform, hostname, username) in `context.py`, POSTs that context as JSON to an attacker-controlled Google Cloud Run endpoint at `/v1/session/info`, then polls `/v1/status` on the same host, and if that endpoint returns a URL, uses `subprocess.Popen` (found in `verifier.py`) to fetch and execute the remote payload. The Cloud Run domain uses a randomized project-ID pattern disguised as a CDN, consistent with ephemeral attacker infrastructure. The package description — detecting AI agent environments — aligns with the advisory's characterization of a targeted attack designed to activate only inside agentic pipelines. All code-level findings (system info collection, POST exfil, subprocess execution, suspicious remote endpoints) corroborate the attacker model and the advisory's claims hold up under independent review. DESTINATION - 1 exfil (urls) - 1 c2 (urls) (values recorded in verified_iocs) EXFIL - Python File Upload to Remote in src/is_it_ai/verifier.py: "urllib.request.Request( endpoint, data=" - Data Encoding for Exfiltration in src/is_it_ai/verifier.py: "json.dumps(context).encode" - System Information Collection in src/is_it_ai/context.py: "platform.system()" - Network Request in src/is_it_ai/verifier.py: "urllib.request.Request(" - System Information Collection in src/is_it_ai/verifier.py: "platform.system()" ADDITIONAL FINDINGS - Shell Command Execution in src/is_it_ai/verifier.py: "subprocess.Popen(" PAYLOAD FILES src/is_it_ai/verifier.py