GCVE-110-OSM-2026-8167

Malicious package detected. Behaviors: data exfiltration. DESTINATION - custom-c2: https://reda-sequestered-justine.ngrok-free.dev/tron (primary, plaintext) in trongridweb/main.py - custom-c2: https://reda-sequestered-justine.ngrok-free.dev/switcher (plaintext) in trongridweb/main.py - custom-c2: reda-sequestered-justine.ngrok-free.dev (plaintext) in trongridweb/main.py EXFIL - Network Request in trongridweb/main.py: "requests.post(" ADDITIONAL FINDINGS - Ngrok Tunneling Service in trongridweb/main.py: "ngrok-free.dev" PAYLOAD FILES trongridweb/main.py INDICATORS (IOCs) - payloadFileHash: afcddedff4c44acaab8ec5995d12c868b9fe602a823e23782b4aa4abd12ac14e