GCVE-110-OSM-2026-9142

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py DESTINATION - custom-c2: https://webhook.site/5577a1c0-0be2-43ec-973b-2f3e9ae19414 (primary, plaintext) in setup.py EXFIL - OAST/Interactsh Exfiltration in setup.py: "webhook.site" - Python File Upload to Remote in setup.py: "urllib.request.Request( BEACON_URL, data=" - Data Encoding for Exfiltration in setup.py: "json.dumps(data).encode" - Network Request in setup.py: "urllib.request.Request(" - System Information Collection in setup.py: "socket.gethostname()" - DNS Lookup in setup.py: "socket.gethostbyname(" ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={'install'" PAYLOAD FILES setup.py INDICATORS (IOCs) - payloadFileHash: 66d62b867cd7aac4dc34590d88f8ea5a1c9bb06dcd501e98573d8a0437bb987e