acloud-clients
MAL-2025-191673
PyPImalware2/25/2025
Description
Malicious code in acloud-clients (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
46dfd1e4168fb5aa7e48693d252de6884b88a67b1be45600bcfbe294bb4ca0d3
89813876cca364b0dffda624005d527aa3c9f54ea7ce20af8186faf8f374ba6f
c2c78daea9a1be9a06f2234d5bbf333f5bf4df0b6e0f45ac2a4ffaf62a1c42bc
9f549adaca1f78175dd7ee0f6f2f4604888a320a1e61dd36b6064e8f85918a2f
Domains (2)
checktimeserver.orgaliyun-sdk-requests.xyz
References (4)
https://github.com/pypi-data/pypi-mirror-238/blob/code/packages/snapshot-photo/snapshot_photo-0.0.3-py3-none-any.whl/snapshot_photo/date_format.pyOSVhttps://x.com/ReversingLabs/status/1900198602242204003OSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSVhttps://bad-packages.kam193.eu/pypi/package/acloud-clientsOSV
Details
EcosystemPyPI
Attack Typemalware
Published2/25/2025
Quick Actions