GCVE-110-OSM-2026-2867

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, code execution, network activity. Payload: setup.py Key findings: - OAST/Interactsh Exfiltration in setup.py: ".oast.fun" - Shell Command Execution in setup.py: "os.system(" - setup.py Code Execution in setup.py: "class PostInstallCommand(install): def run(self): install.run(self..." - Setup.py Command Override in setup.py: "cmdclass={ 'install'" IOCs: - domains: pwned.xkrlhpfhpyyqcliksduje2u806qpajqtq.oast.fun - payloadFileHash: dcacad96860a3eaa4c09844bb3b300bf052e7c9275720eb5ecf584063f32136b