GCVE-110-OSM-2026-3046

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published April 23, 2026

Malicious package detected. Behaviors: data exfiltration, network activity. Payload: pypi/aas-http-client@1.0.7/tests/test_utils.py Key findings: - Decoded Base64 Content in pypi/aas-http-client@1.0.7/tests/test_utils.py - Decoded Base64 Content in pypi/aas-http-client@1.0.7/tests/test_utils.py IOCs: - urls: https://industrialdigitaltwin.io/aas-specifications/IDTA-01002/v3.1.1/specification/interfaces.html, https://industrialdigitaltwin.io/aas-specifications/IDTA-01002/v3.1.1/specification/interfaces.htm, https://fluid40.github.io/aas-http-client/, http://basyx_python_server:80/, http://javaaasserver:8075 (+5 more) - domains: industrialdigitaltwin.io, fluid40.github.io, aurora-fluid40-rt.iqstruct-engineering.de, fluid40.de - emails: daniel.klein@em.ag - payloadFileHash: 1e9629626bacb7032ef7fdd73f282e47a16dca3e2e691ad7bb386370eef5b4a9 Decoded/deobfuscated IOCs: - urls: https://fluid40.de/ids/sm/1515_5306_7624_5367 - domains: fluid40.de

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

9.6/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	aas-http-client	all (affected)	—

References

Malicious pypi package: aas-http-client

advisory

vendor

Browse GCVE Records

73,443 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON