GCVE-110-OSM-2026-6754

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published June 27, 2026

Malicious package detected. Behaviors: data exfiltration. ENTRY playweb/__init__.py (module-import: 10) DESTINATION - ethereumAddresses: 0x119411e1CB00FE009b907eEA54467bFa5C8604dd (exfil, plaintext) EXFIL - Network Request in playweb/client.py: "requests.get(" - Network Request in playweb/network/bootstrap.py: "requests.get(" - Network Request in playweb/network/gossip.py: "requests.post(" - Network Request in playweb/network/peer_manager.py: "requests.get(" - Network Request in playweb/network/sync.py: "requests.get(" ADDITIONAL FINDINGS - Brand New Package PAYLOAD FILES playweb/client.py (+ playweb/network/bootstrap.py, playweb/network/gossip.py) INDICATORS (IOCs) - urls: https://node1.playwebit.com, https://small-field-be1c.playwebit.workers.dev`, https://your-node.com/rpc, https://node2.playwebit.com, https://your-node.com - payloadFileHash: 52e0d1ee60030d85b5080294cf1f935e968e944ff5cb06bc7b452124486d7f68

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1

8.8/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
unknown	playweb-node	1.0.0 (affected)	—

References

Malicious pypi package: playweb-node

advisory

vendor

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON