aliyun-python-sdk-v2

MAL-2026-917

PyPItyposquat2/16/2026

Description

Malicious code in aliyun-python-sdk-v2 (PyPI)

Indicators of Compromise

SHA256 Hashes (2)

29bd2455a576643c51939bd166abab847afd04c3142b576e3f9f0c7978763181

2ef6fd2426c28352ee35e8773854ae6c6b28486c0fca8120d0f9d1f43bfaa529

References (2)

https://bad-packages.kam193.eu/pypi/package/aliyun-python-sdk-v2OSV https://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/alibabacloude.json#L3OSV

Details

EcosystemPyPI

Attack Typetyposquat

Published2/16/2026

Quick Actions

All Incidents PyPI Incidents

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001