GCVE-110-OSM-2026-8726

Malicious package detected. Behaviors: code execution. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py ADDITIONAL FINDINGS - Shell Command Execution in custom_install.py: "subprocess.Popen(" - Shell Command Variable Setup in custom_install.py: "'cmd.exe', '/k', bat_file], creationflags=subprocess.CREATE_NEW_CONSOLE) # Для L..." - Setup.py Command Override in setup.py: "cmdclass={ 'install'" PAYLOAD FILES setup.py (+ custom_install.py) INDICATORS (IOCs) - payloadFileHash: 0c6cfec8e23778bdaa428e19c9aedfc522a5955856c2be681b018bbae4b78427