VDB
GCVE-110-OSM-2026-9141
GCVE-110-OSM-2026-9141
Advisory PublishedCVSS 5.4/10
Suspicious package detected. Behaviors: data exfiltration.
ENTRY
dev_helper/__init__.py (module-import: 48)
DESTINATION
- telegram-bot: 8622479389:AAGdq88yD4xTy9xcmh_IiDxD61RepwyPqM0 (primary, plaintext) in dev_helper/bot.py
- custom-c2: https://key-2qfm.vercel.app/api/key (plaintext) in dev_helper/decryptor.py
- custom-c2: key-2qfm.vercel.app (plaintext) in dev_helper/decryptor.py
EXFIL
- Network Request in dev_helper/decryptor.py: "requests.get("
PAYLOAD FILES
dev_helper/decryptor.py
INDICATORS (IOCs)
- urls: https://t.me/Twstjdgdhsbot
- binaryHashes: f6d8abcb054cdce679d8837813148a57233c8a418ac94c9b8c06ff641f171dea
- payloadFileHash: a365d4019e38d1dd2395e387726db17ecff43ee95029fa294be3c6b8808ba139
TELEGRAM THREAT-ACTOR INTELLIGENCE (live API enrichment):
Bot @Twstjdgdhsbot (id 8622479389)
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | dev-helper-bg | all (affected) | — |
Aliases
Browse GCVE Records
75,874 records in the GCVE database · Updated August 4, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.