VDB

GCVE-110-OSM-2026-6415

GCVE-110-OSM-2026-6415
Advisory PublishedCVSS 9.6/10
Vulnetix · Advisory published June 19, 2026
Malicious package detected. ENTRY src/disksweep/cli.py (console-script: disksweep=disksweep.cli:main) ADDITIONAL FINDINGS - Binary: Injection in src/disksweep/__parser.pyd: "VirtualProtect" - Binary: Shell in src/disksweep/__parser.pyd: "cmd.exe /e:ON /v:OFF /d /c "batch file arguments are invalid" - Binary: Process in src/disksweep/__parser.pyd: "CreateProcessW" - Binary: Anti Analysis in src/disksweep/__parser.pyd: "NtQueryInformationProcess" PAYLOAD FILES src/disksweep/__parser.pyd (+ src/disksweep/_parser.pyd) INDICATORS (IOCs) - ipv6: 5::, E::, f:: - domains: lm.fi, 9.DK, 8.uk, ljls.dZ, ew.sO (+1 more) - binaryHashes: 400b586dce650277dd541305182db719b7d6779e6518fb85f7d248989a09648b - payloadFileHash: 9b16aeabaf95e80b946ed53cb8752bbda7c6bee150ad532b50c7acd915bf1fc1
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknowndisksweepall (affected)—

Aliases

MAL-2026-6081

References

Malicious pypi package: disksweep
advisory
advisory
vendor

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›