VDB
GCVE-110-OSM-2026-6529
GCVE-110-OSM-2026-6529
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: data exfiltration.
ENTRY
d0rk3r_telemetry/__init__.py (module-import: 207)
DESTINATION
- custom-c2: https://telemetry.d0rk3r.io/events (primary, plaintext) in d0rk3r_telemetry/__init__.py
- custom-c2: pp.com (plaintext) in d0rk3r_telemetry/__init__.py
EXFIL
- Data Encoding for Exfiltration in d0rk3r_telemetry/__init__.py: "json.dumps(event_data).encode"
- Git Configuration Access in d0rk3r_telemetry/__init__.py: ".gitconfig"
- Network Request in d0rk3r_telemetry/__init__.py: "requests.post("
- System Information Collection in d0rk3r_telemetry/__init__.py: "platform.system()"
PAYLOAD FILES
d0rk3r_telemetry/__init__.py
INDICATORS (IOCs)
- emails: analytics@d0rk3r-project.org
- payloadFileHash: bd06854a161cda242c1cfaad886300bc15f0878240c87928d7183e53012e2f81
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | d0rk3r-telemetry | all (affected) | — |
Aliases
Browse GCVE Records
73,118 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.