GCVE-110-OSM-2026-9550

The package self-identifies in its description as 'Security research - dependency confusion test (authorized VDP)', and the evidence is structurally consistent with that claim: the inflated version 99999.0.1 is the canonical dependency-confusion technique, and the callback URL http://167.233.212.138/cb/db27bcff144c059f/trtllm_subdir_test matches a typical OAST/canary beacon pattern (/cb/ prefix, hash-derived path, package name suffix) used by security researchers to detect internal resolution of public namesquats. The package name itself contains 'subdir-test', further corroborating the test framing. While the IP-literal C2 classification is technically correct — this is a network callback fired from setup.py on install — the payload appears to be a detection beacon rather than an exfiltration endpoint, and no credential theft, persistence, or obfuscation artifacts are present. DESTINATION - 2 c2 (ipv4, urls) (values recorded in verified_iocs) EXFIL - Suspicious Domain in setup.py: "http://167.233.212.138"