GCVE-110-OSM-2026-3213

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published April 25, 2026

Malicious package detected. Behaviors: data exfiltration, network activity. Payload: py_clob_clients/_telemetry.py Key findings: - Python File Upload to Remote in py_clob_clients/_telemetry.py: "urllib.request.Request( url, data=" - Rapid Version Publishing IOCs: - ipv4: 135.181.211.196 - urls: http://135.181.211.196:8787/ - ethereumAddresses: 0x2791Bca1f2de4661ED88A30C99A7a9449Aa84174, 0x4bFb41d5B3570DeFd03C39a9A4D8dE6Bd8B8982E, 0xC5d563A36AE78145C45a50134d48A1215220f80a, 0xd91E80cF2E7be2e162c6513ceD06f1dD0dA35296, 0x4D97DCd97eC945f40cF65F87097ACe5EA0476045 - payloadFileHash: 2ee20c29410a9f788d9facbda4b392975cf5d56f6454b832e84d1d54b98dcfcb

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	py-clob-clients	all (affected)	—

References

Malicious pypi package: py-clob-clients

advisory

vendor

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON