GCVE-110-OSM-2026-9078

Advisory PublishedCVSS 8.8/10

Vulnetix · Advisory published July 23, 2026

Malicious package detected. Behaviors: data exfiltration. DESTINATION - custom-c2: https://reda-sequestered-justine.ngrok-free.dev/tron (primary, plaintext) in trongrider/main.py - custom-c2: https://reda-sequestered-justine.ngrok-free.dev/switcher (plaintext) in trongrider/main.py - custom-c2: reda-sequestered-justine.ngrok-free.dev (plaintext) in trongrider/main.py EXFIL - Network Request in trongrider/main.py: "requests.post(" ADDITIONAL FINDINGS - Ngrok Tunneling Service in trongrider/main.py: "ngrok-free.dev" PAYLOAD FILES trongrider/main.py INDICATORS (IOCs) - payloadFileHash: 3e075389e4101fc247bc5fb09a8bc0e223664568746f73792b54b27b486b2d6b

Download JSON Open in Console