VDB

GCVE-110-OSM-2026-8364

GCVE-110-OSM-2026-8364
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published July 18, 2026
Malicious package detected. Behaviors: data exfiltration. DESTINATION - telegram-bot: 8468110336:AAGUGGUW85ic0sLBthc8QeUIEoOUonk6Kfo (primary, plaintext) in pycryptcore/core.py - telegram-bot: api.telegram.org/bot{BOT_TOKEN}/sendPhoto (plaintext) in pycryptcore/core.py EXFIL - Python File Upload to Remote in pycryptcore/core.py: "requests.post(url, files=" - Network Request in pycryptcore/core.py: "requests.post(" PAYLOAD FILES pycryptcore/core.py INDICATORS (IOCs) - payloadFileHash: cbaf539a1ca4de5435c9495ebaa41a1968c877b3920913e41ea6dab88404a51f - urls: https://t.me/sedoqoqoq_bot TELEGRAM THREAT-ACTOR INTELLIGENCE (live API enrichment): Bot @sedoqoqoq_bot (id 8468110336)
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownpycryptcoreall (affected)—

Aliases

MAL-2026-3211

References

Malicious pypi package: pycryptcore
advisory
advisory
vendor

Browse GCVE Records

75,875 records in the GCVE database · Updated August 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›