acloud-client-uses
MAL-2025-191672
PyPImalware2/25/2025
Description
Malicious code in acloud-client-uses (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
da81ee5e5c815bea11600594497449da7a19a3b0f520242b153e18717c884f46
23487ce28601ae00fc60455a6e324818c68a8a00b3a3d17f7356853ca7eedee5
f6732ff9e717747e0abc42cdf71dce4ed4d06cc15ab5b974638bc388caa0eeb2
c8afa7845eb5e79a9a8a232fd8bc000a02408bfc4506bdbd93c27a844b13b12e
Domains (2)
checktimeserver.orgaliyun-sdk-requests.xyz
References (4)
https://github.com/pypi-data/pypi-mirror-238/blob/code/packages/snapshot-photo/snapshot_photo-0.0.3-py3-none-any.whl/snapshot_photo/date_format.pyOSVhttps://x.com/ReversingLabs/status/1900198602242204003OSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSVhttps://bad-packages.kam193.eu/pypi/package/acloud-client-usesOSV
Details
EcosystemPyPI
Attack Typemalware
Published2/25/2025
Quick Actions