GCVE-110-OSM-2026-8358

Malicious package detected. Behaviors: data exfiltration, network activity. ENTRY src/my_pipeline_watcher_poc/main.py (console-script: my-pipeline-watcher-poc=my_pipeline_watcher_poc.main:main) DESTINATION - custom-c2: http://100.69.246.45:8080/health (primary, plaintext) in src/my_pipeline_watcher_poc/main.py - custom-c2: 100.69.246.45 (plaintext) in src/my_pipeline_watcher_poc/main.py EXFIL - System Information Exfiltration in src/my_pipeline_watcher_poc/main.py: "os.getcwd() info = { "v": "99999.99999.1", "t": ts, "h": hostname, "u": user, "p..." - HTTP Data Exfiltration in src/my_pipeline_watcher_poc/main.py: "urllib.request import urllib.parse def main(): hostname = socket.gethostname() u..." - Network Request in src/my_pipeline_watcher_poc/main.py: "urllib.request.urlopen(" - System Information Collection in src/my_pipeline_watcher_poc/main.py: "socket.gethostname()" - Suspicious Domain in src/my_pipeline_watcher_poc/main.py: "http://100.69.246.45" PAYLOAD FILES src/my_pipeline_watcher_poc/main.py INDICATORS (IOCs) - payloadFileHash: 27be848400836f3ed604274b8fa7a786ea41a80e967981e49716bd858f8a7037