GCVE-110-OSM-2026-14380

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published August 7, 2026

Malicious package detected. Behaviors: data exfiltration, code execution. ENTRY proxyhubb_provider/cli.py (console-script: proxyhubb-provider=proxyhubb_provider.cli:main) DESTINATION - 3 c2 (urls, domains) (values recorded in verified_iocs) EXFIL - System Information Collection in proxyhubb_provider/cli.py: "platform.system()" ADDITIONAL FINDINGS - Download Execute Delete Pattern in proxyhubb_provider/cli.py: "EXEC | 0o755) shutil.move(tmp_name, dest) finally: if os.path.exists(tmp_name): ..." - Shell Command Execution in proxyhubb_provider/cli.py: "subprocess.run(" - Brand New Package - Rapid Version Publishing PAYLOAD FILES proxyhubb_provider/cli.py

Download JSON Look up in the Resolve Platform

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

9.6/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	proxyhubb-provider	0.1.1 (affected)	—

References

Malicious pypi package: proxyhubb-provider

advisory

vendor

Browse GCVE Records

930 records in the GCVE database · Updated November 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON