aliyun-ai-labs-sdk

MAL-2025-5095

PyPImalware6/18/2025

Description

Malicious code in aliyun-ai-labs-sdk (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

2bcc187bb4ee890fb7f79068adec99df304e7d5cf2fea4ada18b286caca47854

ac4a9ff5edcf507315ae233136486ce238eae9628093475cf2afe802ebf6b07f

References (1)

https://www.reversinglabs.com/blog/malicious-attack-method-on-hosted-ml-models-now-targets-pypiOSV

Details

EcosystemPyPI

Attack Typemalware

Published6/18/2025

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001