GCVE-110-OSM-2026-9072

Advisory PublishedCVSS 9.6/10

Vulnetix · Advisory published July 24, 2026

Malicious package detected. Behaviors: data exfiltration, code execution. ENTRY discordnv/main.py (console-script: spaysdata-run=discordnv.main:main_entry) LOOT - Discord Token Theft in discordnv/main.py: "discord\\Local Storage" DESTINATION - discord-webhook: https://discord.com/api/webhooks/1528403989983662194/qCwXL7KBSqFwpzz5RWPp1eCKZlqWa-lGBGZ3z4iDl_oaEFkG9EGXJTneA5LIHDUDrkFF (primary, plaintext) in discordnv/main.py - custom-c2: https://discordapp.com/api/v6/users/@me (plaintext) in discordnv/main.py - custom-c2: discordapp.com (plaintext) in discordnv/main.py EXFIL - Webhook Data Exfiltration in discordnv/main.py: "discord.com/api/webhooks/1528403989983662194/qCwXL7KBSqFwpzz5RWPp1eCKZlqWa-lGBGZ..." - Data Encoding for Exfiltration in discordnv/main.py: "base64.b64encode(" - Network Request in discordnv/main.py: "requests.post(" ADDITIONAL FINDINGS - Shell Command Execution in discordnv/main.py: "os.system(" PAYLOAD FILES discordnv/main.py INDICATORS (IOCs) - payloadFileHash: 3c60a2a6df49e1a312815e2b323d5683704cf09b1a10b6843cbbe3d40950628f

Download JSON Open in Console