aliyun-ai-labs-snippets-sdk

MAL-2025-5096

PyPImalware5/19/2025
Description

Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)

Indicators of Compromise
SHA256 Hashes (7)
09496bdfd919482ae61650986520dcddefcc4bfb59d096a3d08b9d8d87201570
8d5c6c189f541e861379203e450c284ab9d8fa81eccaeb03d8abad076e8f1954
459b9313aa2d453392e97f619a0ffb2898c3b90700e72dcb2cde4d1a1b97b1ac
c0224ee10c119727e17c4442ea2e501218589bcfd621e195ed4d4fa011d7dbac
5ef61ced1119a091ad615414ea163fd85456d449b612e8c5508da1cff9796669
f082f98216f081d7b498cd2dbd7df7e333e2ba9acd6cc8bfa12e488bcc4507c3
9c1355c281750ba7eb9c46080699ee679876c5df96ef500060960a79f39d7d03
Domains (1)
aksjdbajkb2jeblad.oss-cn-hongkong.aliyuncs.com
References (3)
https://bad-packages.kam193.eu/pypi/package/aliyun-ai-labs-snippets-sdkOSVhttps://www.reversinglabs.com/blog/malicious-attack-method-on-hosted-ml-models-now-targets-pypiOSVhttps://www.reversinglabs.com/blog/malicious-attack-method-on-hosted-ml-models-now-targets-pypiOSV
Details
EcosystemPyPI
Attack Typemalware
Published5/19/2025
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001