GCVE-VVD-OSM-2026-251

Malicious package detected. Payload: src/perf_utils/utils.py Key findings: - Filename Extraction from Response in src/perf_utils/utils.py: "Content-Disposition: form-data; name="{field}"; filename=" IOCs: - ipv4: 8.8.8.8 - urls: https://api.internal-service.local/v1/status, https://api.internal-service.local/v1/update, https://bob.dev, https://a.com/p, https://a.com/p?x=0 (+2 more) - domains: hocevar.net, thcdn.net, your-org.com, bob.dev, a.com (+2 more) - emails: sam@hocevar.net, gerald.scott@thcdn.net, security-tools@your-org.com - discordWebhooks: https://discord.com/api/webhooks/123/abc - payloadFileHash: 090f0fd1a83d85de1f31a95f676949bdafaf8a9b61b0a4ae917486b6e6bc9b8f