GCVE-110-OSM-2026-3474

This package appears to be a security scanning tool built and released by Spectra Security (https://www.spectra-security.com/). However, there are several red flags that make this package very suspicious: 1. ALL documentation links are fake/broken (404s): - https://github.com/spectra-team/spectra → Does not exist - https://spectra-security.readthedocs.io → Does not exist - All GitHub repo links, installation scripts, and docs are fake 2. Author inconsistency: - README: iuawsyukboasfuilj (random string) - Metadata: Spectra Team with team@spectra-security.com 3. Professional-looking but hollow: - Extensive, detailed documentation and feature lists - Proper development tools (pytest, bandit, coverage) - But no actual project infrastructure exists Payload: spectra/modules/xss_scanner.py Secondary files: spectra/modules/lfi_scanner.py Key findings: - Sensitive File Access in spectra/modules/lfi_scanner.py: ""/etc/passwd"" - Sensitive File Access in spectra/modules/network_monitor.py: "'/etc/shadow'" - Corporate Environment Targeting in spectra/modules/network_monitor_metadata.py: "tmon -i eth0 --protocols tcp,udp --filter" - Sensitive File Access in spectra/modules/sql_injection_scanner.py: "'/etc/passwd'" - OAST/Interactsh Exfiltration in spectra/modules/ssrf_scanner.py: "burpcollaborator.net" IOCs: - domains: spectra-security.com - emails: team@spectra-security.com, UltraSecurePass@db.internal - sha256Hashes: 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8 - payloadFileHash: e70c5ae40862e38d1a48ce06194c5f7689ffc3504ba0ed2b252dc25c80fddfc7