GCVE-110-OSM-2026-8722

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published July 19, 2026

Malicious package detected. Behaviors: data exfiltration. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py EXFIL - Python File Upload to Remote in setup.py: "urllib.request.Request( WEBHOOK_URL, data=" - System Information Exfiltration in setup.py: "os.getcwd(), 'timestamp': __import__('datetime').datetime.utcnow().isoformat() +..." - HTTP Data Exfiltration in setup.py: "os.getcwd(), 'timestamp': __import__('datetime').datetime.utcnow().isoformat() +..." - Network Request in setup.py: "urllib.request.Request(" - System Information Collection in setup.py: "socket.gethostname()" ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={'install'" PAYLOAD FILES setup.py INDICATORS (IOCs) - payloadFileHash: e05d0e1f9688df9f3f697a7cea17e2e7ff1263ec19ebb28c70fe2f0369b3421d

Download JSON Open in Console