alibabacloud-code-tool

MAL-2026-915

PyPItyposquat2/16/2026

Description

Malicious code in alibabacloud-code-tool (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

5e4d81a71d0710ac3618ec41e8027ee6a96ae9845ca67b33b950c8d99d8d2e8a

3255cd7d14e208ba6336511f7d99803c1b5ba9b06b9e3423c4284bc7352c3642

References (2)

https://bad-packages.kam193.eu/pypi/package/alibabacloud-code-toolOSV https://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/alibabacloude.json#L3OSV

Details

EcosystemPyPI

Attack Typetyposquat

Published2/16/2026

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001