time-check-server
MAL-2025-191900
PyPImalware2/25/2025
Description
Malicious code in time-check-server (PyPI)
Indicators of Compromise
SHA256 Hashes (4)
2f2e240ba64e091984af722ee4bf49c4a8863c447eb67cb7ea7069a3d2afdbd3
a5da6618a6f04ceb52acd56bc78e318cb7fbffa07ef3acc041729afe52428c44
4e5eb3ea6d8f0f5d8378efaf0fe158a1825d191de164392316ab79724cb998a2
190aafe9975a78c45bdafc2bb25079ad22ac46aef08fb579c5c0adbfd7193739
Domains (2)
checktimeserver.orgaliyun-sdk-requests.xyz
References (4)
https://github.com/pypi-data/pypi-mirror-238/blob/code/packages/snapshot-photo/snapshot_photo-0.0.3-py3-none-any.whl/snapshot_photo/date_format.pyOSVhttps://x.com/ReversingLabs/status/1900198602242204003OSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSVhttps://bad-packages.kam193.eu/pypi/package/time-check-serverOSV
Details
EcosystemPyPI
Attack Typemalware
Published2/25/2025
Quick Actions