GCVE-110-OSM-2026-14382

The package presents itself as 'Privacy Pass client primitives' but ships no cryptographic functionality. Its only runtime effect is a data-exfiltration beacon. setup.py invokes a `_report()` routine during build/install that collects hostname, username, current working directory, argv, the parent process command line read from /proc/<ppid>/cmdline, and environment variable names and values matching credential-related prefixes (AWS_, GITHUB_, PIP_, and others), then POSTs the JSON payload to the hardcoded bare-IP endpoint http://85.190.112.236:8881/b/<nonce> over plain HTTP. privacypass_py/__init__.py repeats the same beacon at module top level, calling `_report('import')` on every `import privacypass_py` with an expanded prefix list (CLOUDFLARE_, SUPERTOKENS, HOME, USER, PATH) and an additional `secretish_names` list filtered by substrings KEY/SECRET/TOKEN/PASS/CRED/PRIVATE/SEED/MNEMONIC/SIGNATURE/COOKIE/SESSION/AUTH, sent to http://85.190.112.236:8881/f/<nonce>. The import-time path fires outside pip build isolation. The name and description function as cover for a package whose only shipped code is the beacon. ENTRY privacypass_py/__init__.py (module-import: 9) DESTINATION - 3 exfil (custom-c2) (values recorded in verified_iocs) EXFIL - Network Request in privacypass_py/__init__.py: "Request("http:" - Suspicious Domain in privacypass_py/__init__.py: "http://85.190.112.236" - Network Request in setup.py: "Request("http:" - Suspicious Domain in setup.py: "http://85.190.112.236" ADDITIONAL FINDINGS - Brand New Package PAYLOAD FILES privacypass_py/__init__.py (+ setup.py)