GCVE-VVD-OSM-2026-225

Malicious package detected. Behaviors: data exfiltration. Payload: setup.py Key findings: - System Information Exfiltration in setup.py: "socket.gethostname()), "os": platform.system(), "os_ve..." - Python File Upload to Remote in setup.py: "urllib.request.Request( "https://youjustgotbeamed.com/key", ..." - POST Method Defined for Exfiltration in setup.py: "method="POST" ) with urllib.request.urlopen" - Platform Detection with Data Collection in setup.py: "platform.system(), "os_version": platform.version(), "machine_..." IOCs: - ipv4: 122.0.0.0 - urls: https://youjustgotbeamed.com/, https://youjustgotbeamed.com/key - domains: youjustgotbeamed.com - payloadFileHash: 94949c2a027de9b769d4b160e9d366d5b66f509cdd43451142099432bde86d81