VDB
GCVE-110-OSM-2026-1588
GCVE-110-OSM-2026-1588
Advisory PublishedCVSS 9.6/10
Malicious package detected. Behaviors: data exfiltration, code execution, network activity.
Payload: setup.py
Key findings:
- Environment Variable Exfiltration in setup.py: "os.environ.get(key)
if val:
data[key] = val[:100]
..."
- OAST/Interactsh Exfiltration in setup.py: ".oast.fun"
- Shell Command Execution in setup.py: "subprocess.check_output("
- Python File Upload to Remote in setup.py: "urllib.request.Request(url, data="
- Suspicious Domain in setup.py: "oast.fun"
IOCs:
- urls: http://{CANARY
- domains: ienfcixqbgvbxkccdoxgfz2zhmspdpiys.oast.fun, {canary
- payloadFileHash: 91329b283faa33fd5934ceb3bcf70c73109c782aafbaedab4a240f1e90018ade
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | gprofiler-logging | * (affected) | — |
Aliases
Browse GCVE Records
72,148 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.