GCVE-110-OSM-2026-8715

Malicious package detected. Behaviors: data exfiltration, code execution. ENTRY data_parser/cli.py (console-script: "data-parser = data_parser.cli:main") DESTINATION - custom-c2: https://cdn.jsdelivr.net/gh/ (primary, decoded) in data_parser/core.py - custom-c2: cdn.jsdelivr.net (decoded) in data_parser/core.py EXFIL - System Information Collection in data_parser/core.py: "socket.gethostname()" OBFUSCATION - Decoded Hex String Content in data_parser/core.py (x6) - Decoded Base64 Content in data_parser/core.py (x4) - recovered 1 urls, 1 domains, 1 paths from decoded/deobfuscated content ADDITIONAL FINDINGS - Silent Process Execution in data_parser/core.py: "stdout=_DEVNULL" PAYLOAD FILES data_parser/core.py INDICATORS (IOCs) - paths: /tmp/update - payloadFileHash: 72ada231563acc1eb81576f9ad3873b33a2b80fd463f461aa05279478f068421