GCVE-110-OSM-2026-158

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published May 26, 2026

Malicious package detected. Behaviors: data exfiltration. Entrypoint: setup.py (install-hook: install/develop/build override present) Payload: setup.py Key findings: - Environment Variable Exfiltration in setup.py: "os.environ.get("EDISON_QUERY", "test") url = "https://edison-k8.vercel.a..." - Python File Upload to Remote in setup.py: "urllib.request.Request( url, data=" - Data Encoding for Exfiltration in setup.py: "json.dumps({"query": query}).encode" - setup.py Code Execution in setup.py: "cmdclass={**wheel_cmd, "install"" - Setup.py Command Override in setup.py: "cmdclass={**wheel_cmd, "install"" IOCs: - payloadFileHash: 387a7e5df10d7ba988bcc014b3c6e770bbf9e2a1ad85c16207ca1ff1cf7724bf

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

9.6/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	milla-migration	all (affected)	—
unknown	py-sysbench	all (affected), all (affected), all (affected), all (affected)	—
unknown	demozecosse	all (affected), all (affected), all (affected), all (affected), * (affected), all (affected), * (affected)	—
unknown	chat-xdk	* (affected), all (affected), all (affected), all (affected)	—
unknown	edison-tools	all (affected)	—