aliyun-python-sdk-v2

GHSA-frfc-grvq-8hqw

Malicious code in aliyun-python-sdk-v2 (PyPI)

Details

**Severity:** Critical

**Affected versions:** `= 2.13.36`

## Source: kam193 (29bd2455a576643c51939bd166abab847afd04c3142b576e3f9f0c7978763181)
Series of packages impersonating Alibaba Cloud. Two oldest hide code to run obfuscated code, but are likely to be used as dependency as the obfuscated code is not inside. The newest describe similar functionality, but the inside is highly obfuscated. Package names closely reassemble names of real Alibaba packages


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-02-alibabacloude


Reasons (based on the campaign):


 - typosquatting


 - impersonation


 - obfuscation

---

Credit: [OpenSSF](https://github.com/ossf/malicious-packages) ([source](https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/aliyun-python-sdk-v2/MAL-2026-917.json))

**References:**
- https://bad-packages.kam193.eu/pypi/package/aliyun-python-sdk-v2
- https://github.com/kam193/package-campaigns/blob/97de615c16496639c059ee2f62c5dd7d88ac06eb/pypi/packages/malicious/osv/alibabacloude.json#L3
- https://github.com/ossf/malicious-packages/blob/49d0cfba3689ed9b195d101d3a2a964c6a77f767/osv/malicious/pypi/aliyun-python-sdk-v2/MAL-2026-917.json
- https://github.com/advisories/GHSA-frfc-grvq-8hqw

Compromised versions (1)

= 2.13.36

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.