GCVE-VVD-OSM-2026-200

Malicious package detected. Behaviors: code execution, obfuscated code. Payload: chacha_lite_encrypt/config.py Key findings: - Shell Command Execution in chacha_lite_encrypt/config.py: "subprocess.Popen(" - Silent Process Execution in chacha_lite_encrypt/config.py: "stdout=subprocess.DEVNULL" IOCs: - domains: MANIFEST.in - bitcoinAddresses: 16crw64vg86mExNn2wmGM7Xr4iALo9f46, 17zHCsiaSkt2Exf47aiUC28G5vaykA9nm, 1XK1vazF58fRAEggWPyTXJgRcWUZKUzo, 1SAgGxvJux4cHkCoSfwgWcjard5iNfjv, 3gyuyfwhy4n5iFzfoyczwvwrqFvaygw9X2 - payloadFileHash: d2375e106bc81acb00662631688784eb3f46529d35a4fe357dcc7ebaabf90460