GCVE-110-OSM-2026-9601

The package fetches `https://bootstrap.pypa.io/get-pip.py` at runtime inside `aiprepkit/deps.py` and executes shell commands via `subprocess.run` — a pattern consistent with a runtime dependency bootstrapper that downloads and executes remote code. While `bootstrap.pypa.io` is a legitimate PyPA domain, the combination of fetching a remote script and executing it via shell commands is a classic stager pattern even when dressed up with a benign-looking URL. The package has no repository, no homepage, a zero-package author account, and a vague description ('Prep kit for AI lab embedded runtime dependencies'), all of which are metadata signals for a newly created account with unclear intent. The static scorer rates this clean, but the IOC classifier incorrectly tags `bootstrap.pypa.io` as C2 — this domain is not malicious, however the underlying behavior (fetch-then-exec) still warrants manual review to confirm the subprocess calls aren't executing the downloaded content or additional payloads. DESTINATION - 2 c2 (urls, domains) (values recorded in verified_iocs) ADDITIONAL FINDINGS - Shell Command Execution in aiprepkit/deps.py: "subprocess.run(" PAYLOAD FILES aiprepkit/deps.py