alicloud-client-sdk
MAL-2025-191677
PyPImalware2/25/2025
Description
Malicious code in alicloud-client-sdk (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
68c2f04be7ad1e555d333c26d7f356217bc8290f4fcda4b1f7a8fb7ace6040fc
59563b61e548ff83488a4940e0511825ebf1a2d0995c83e0056e07fd7a4bd782
27c974fe93b58e128d4e488e48ac74e5d331ed010a1572f2ab37ca2a3f2d1dd0
f78ace6037236a0f611ed2c6181df73fde5c1ebd172b3694e8b4afda175dfe81
Domains (2)
checktimeserver.orgaliyun-sdk-requests.xyz
References (4)
https://github.com/pypi-data/pypi-mirror-238/blob/code/packages/snapshot-photo/snapshot_photo-0.0.3-py3-none-any.whl/snapshot_photo/date_format.pyOSVhttps://x.com/ReversingLabs/status/1900198602242204003OSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSVhttps://bad-packages.kam193.eu/pypi/package/alicloud-client-sdkOSV
Details
EcosystemPyPI
Attack Typemalware
Published2/25/2025
Quick Actions