VDB
GCVE-110-OSM-2026-7831
GCVE-110-OSM-2026-7831
Advisory PublishedCVSS 8.8/10
Suspected dependency confusion attack. Behaviors: data exfiltration, code execution.
ENTRY
pipspeed/__init__.py (module-import: 87)
DESTINATION
- custom-c2: https://www.jsonkeeper.com/b/53XMN (primary, plaintext) in pipspeed/__init__.py
- custom-c2: www.jsonkeeper.com (plaintext) in pipspeed/__init__.py
EXFIL
- Payload Download from Paste Service in pipspeed/__init__.py: "jsonkeeper.com"
- Network Request in pipspeed/__init__.py: "requests.get("
ADDITIONAL FINDINGS
- Shell Command Execution in pipspeed/__init__.py: "subprocess.run("
- Silent Process Execution in pipspeed/__init__.py: "stdout=subprocess.DEVNULL"
PAYLOAD FILES
pipspeed/__init__.py
INDICATORS (IOCs)
- payloadFileHash: c25eac425dc3cfab257b78d65bab6c4651d4ad5fdd3bc7297cf0766b397ac255
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | pipspeed | all (affected) | — |
Aliases
Browse GCVE Records
73,866 records in the GCVE database · Updated July 19, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.