credential-python-sdk
MAL-2025-2950
PyPImalware2/25/2025
Description
Malicious code in credential-python-sdk (PyPI)
Indicators of Compromise
SHA256 Hashes (7)
98c6376a072729cd054d1650147ae1f38ba5ebe4182ccabc085ff7689a392f5e
ccb75be9c570fba4a5794bea20205e89e2d4e5f8d24d654e0cb08c6729ee1435
ac81bbfc5a381702150076db0a7049386690e545f3fede3d4247fc6deb4b331b
6c6598ac9c321af3b0526ddceb5ffc6e78d593e0c3e6bdd259b06c0792705cc6
85b5099f9045b317522307daffade9a3a513dbb8ab32822650127dc4153a10c0
7331b7ac44dd9fdd42c32d504cb93a5b312525d3c1377d5e5f9d4cdd4a9ecaf8
47a2cddf6cc4f54b884fd20b538573846712a9a95bd112b853c89c5b5b024b52
Domains (2)
checktimeserver.orgaliyun-sdk-requests.xyz
References (6)
https://x.com/ReversingLabs/status/1900198602242204003OSVhttps://security.snyk.io/vuln/SNYK-PYTHON-CREDENTIALPYTHONSDK-12201349OSVhttps://github.com/pypi-data/pypi-mirror-238/blob/code/packages/snapshot-photo/snapshot_photo-0.0.3-py3-none-any.whl/snapshot_photo/date_format.pyOSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSVhttps://bad-packages.kam193.eu/pypi/package/credential-python-sdkOSVhttps://thehackernews.com/2025/03/malicious-pypi-packages-stole-cloud.htmlOSV
Details
EcosystemPyPI
Attack Typemalware
Published2/25/2025
Aliases
SNYK-PYTHON-CREDENTIALPYTHONSDK-12201349
Quick Actions