GCVE-110-OSM-2026-4567

[osmalyze-auto] Malicious package detected. Behaviors: code execution. [osmalyze-auto] Entrypoint: src/selfservsweeper/__main__.py (console-script: selfservsweeper-cli=selfservsweeper.__main__:main) Payload: src/selfservsweeper/installer.py Secondary files: src/selfservsweeper/supervisor_template.py, src/selfservsweeper/update.py Key findings: - Shell Command Execution in src/selfservsweeper/installer.py: "subprocess.Popen(" - Shell Command Execution in src/selfservsweeper/supervisor_template.py: "subprocess.run(" - Shell Command Execution in src/selfservsweeper/update.py: "subprocess.run(" - Rapid Version Publishing IOCs: - payloadFileHash: 9a7fac81ff9188773c29d5c200ba9fca002380bc253ec0185adeb2537a0e6b8b