GCVE-110-OSM-2026-171

[osmalyze-auto] Malicious package detected. Behaviors: data exfiltration, code execution, network activity. [osmalyze-auto] Entrypoint: drydock/cli/entrypoint.py (console-script: drydock=drydock.cli.entrypoint:main) Exfil: 8488479213:AAGd2tMUrqc-Xse14IQ6yfoMudAAal7odio (telegram-bot, recovery: plaintext in scripts/notify_release.py) Payload: scripts/bench_inference.py Secondary files: scripts/llm_balancer.py, drydock/cli/clipboard.py Key findings: - Shell Command Execution in .github/workflows/build-and-upload.yml: "subprocess.check_output(" - Shell Command Execution in drydock/admiral/stager.py: "subprocess.run(" - Shell Command Execution in drydock/admiral/validator.py: "subprocess.run(" - Shell Command Execution in drydock/cli/clipboard.py: "subprocess.run(" - Data Encoding for Exfiltration in drydock/cli/clipboard.py: "base64.b64encode(" IOCs: - ipv4: 1.1.1.1, 2.2.2.2 - urls: http://192.168.50.21:8877/, http://192.168.50.19:8080`, http://localhost:8001`, http://192.168.50.19:8080/v1, https://api.githubcopilot.com/mcp (+45 more) - domains: agentskills.io, monitor.sh, api.githubcopilot.com, agentclientprotocol.com, zed.dev (+28 more) - emails: pointing@mdparse.inline, n@app.command, a@b.com, logic@sr.py - telegramBots: 8488479213:AAGd2tMUrqc-Xse14IQ6yfoMudAAal7odio - telegramApi: api.telegram.org/bot{BOT_TOKEN}/sendMessage, api.telegram.org/bot{BOT_TOKEN}/getUpdates?offset={last_id - sha256Hashes: 0000000000000000000000000000000000000000000000000000000000000000 - payloadFileHash: c264edcc9e6f8b39190e04fe471335151500cba098021e44acfafe08e34783a4