GCVE-110-OSM-2026-7545

Malicious package detected. Behaviors: data exfiltration, code execution, network activity. ENTRY waymo-waymax/__init__.py (module-import: 127) DESTINATION - oast: https://312pc5z1y8k7qp8gf2hcxrfqxh3br8fx.oastify.com (primary, plaintext) in waymo-waymax/__init__.py - bitcoinAddresses: 312pc5z1y8k7qp8gf2hcxrfqxh3br8fx (exfil, plaintext) EXFIL - Sensitive File Access in waymo-waymax/__init__.py: "'~/.aws/credentials'" - OAST/Interactsh Exfiltration in waymo-waymax/__init__.py: "oastify.com" - Python File Upload to Remote in waymo-waymax/__init__.py: "urllib.request.Request(url, data=" - Data Encoding for Exfiltration in waymo-waymax/__init__.py: "json.dumps(payload).encode" - Network Request in waymo-waymax/__init__.py: "urllib.request.Request(" - System Information Collection in waymo-waymax/__init__.py: "socket.gethostname()" - Suspicious Domain in waymo-waymax/__init__.py: "oastify.com" ADDITIONAL FINDINGS - Shell Command Execution in waymo-waymax/__init__.py: "subprocess.check_output(" - Silent Process Execution in waymo-waymax/__init__.py: "stderr=subprocess.DEVNULL" PAYLOAD FILES waymo-waymax/__init__.py INDICATORS (IOCs) - payloadFileHash: f09ed38c3835c75acd4bb499dd0f3f4cc30c8565ccf393b456bf660f59845e31