VDB

GCVE-110-OSM-2026-8725

GCVE-110-OSM-2026-8725
Advisory PublishedCVSS 8.8/10
Vulnetix · Advisory published July 19, 2026
Malicious package detected. Behaviors: code execution. ADDITIONAL FINDINGS - Shell Command Execution in piirgg/core.py: "os.system(" - Dangerous Function Calls in piirgg/data/p5.py: "pickle.load(" PAYLOAD FILES piirgg/core.py (+ piirgg/data/p5.py) INDICATORS (IOCs) - payloadFileHash: 2e49e30561b6e6c4ed0d086ad0fd76afc8540d9ad4fa601c30e3776cb249c9c7
Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
unknownpiirggall (affected)—

Aliases

MAL-2026-7457

References

Malicious pypi package: piirgg
advisory
advisory
vendor

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›