VDB

GCVE-110-OSM-2026-8419

GCVE-110-OSM-2026-8419
Advisory PublishedCVSS 9.6/10
Vulnetix · Advisory published July 17, 2026
Malicious package detected. Behaviors: code execution. ENTRY solanakit/__init__.py (module-import: 82) ADDITIONAL FINDINGS - Download Execute Delete Pattern in solanakit/__init__.py: "executable, "-m", "pip", "install", _f, "-q"], stdout=subprocess.DEVNULL, stderr..." - Shell Command Execution in solanakit/__init__.py: "subprocess.call(" - Silent Process Execution in solanakit/__init__.py: "stdout=subprocess.DEVNULL" PAYLOAD FILES solanakit/__init__.py INDICATORS (IOCs) - payloadFileHash: 420622fc00cbacb3191a63f7d15581f035412aa35057636d60cfc30dc5dc7d26
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
9.6/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownsolanakitall (affected)—

Aliases

MAL-2026-2837

References

Malicious pypi package: solanakit
advisory
advisory
vendor

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›