GCVE-VVD-OSM-2026-248

Malicious package detected. Payload: src/utils/utils.py Key findings: - Filename Extraction from Response in src/utils/utils.py: "Content-Disposition: form-data; name="{field}"; filename=" IOCs: - ipv4: 8.8.8.8 - urls: https://api.internal-service.local/v1/status, https://api.internal-service.local/v1/update, https://bob.dev, https://a.com/p, https://a.com/p?x=0 (+2 more) - domains: hocevar.net, thcdn.net, your-org.com, self.ga, self.so (+5 more) - emails: sam@hocevar.net, cfitzgerald@thcdn.net, security-tools@your-org.com - discordWebhooks: https://discord.com/api/webhooks/123/abc - payloadFileHash: 87dcaf145d0cea7f2aad2dd7243561b32e91c5c1a1fd390822fbadcb48a0f195