VDB
GCVE-110-OSM-2026-3513
GCVE-110-OSM-2026-3513
Advisory PublishedCVSS 8.8/10
[osmalyze-auto] Malicious package detected. Behaviors: code execution.
[osmalyze-auto] Entrypoint: setup.py (install-hook: install/develop/build override present)
Payload: setup.py
Key findings:
- Shell Command Execution in setup.py: "subprocess.run("
- setup.py Code Execution in setup.py: "class CustomInstall(install):
def run(self):
install.run(self)
..."
- Setup.py Command Override in setup.py: "cmdclass={'install'"
IOCs:
- urls: https://readme-typing-svg.demolab.com?font=Fira+Code&weight=600&size=20&pause=800&color=E3342F¢er=true&vCenter=true&width=650&lines=OAuth+2.0+%E2%80%94+No+Cookie+Required;Typed+Models+for+Every+API+Response;Async+%2B+Sync+Clients+Built+In;SQLite+Database+Layer+Included;Open+Cloud+%2B+DataStore+Support;Real-time+Event+System;Marketplace+%26+RAP+Tracking+Tools;Interactive+Terminal+REPL;Production+Ready+%F0%9F%9A%80, https://roboat.pro, http://proxy:8080
- domains: readme-typing-svg.demolab.com, roboat.pro
- payloadFileHash: 349358f81a2da7d8635a5919060a52da92d3b255cfa5cfd0a55a9bffd0fc9a1a
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | rostilesolver | * (affected) | — |
Aliases
Browse GCVE Records
73,834 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.