VYPR
← All malware advisories

pypi · Malicious package advisory

Malware

alibabacloud-code-tool

MAL-2026-915

Malicious code in alibabacloud-code-tool (PyPI)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: kam193 (5e4d81a71d0710ac3618ec41e8027ee6a96ae9845ca67b33b950c8d99d8d2e8a)
This package impersonates Alibaba Cloud account and contains highly obfuscated code.


---

Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers.


Campaign: 2026-02-alibabacloude


Reasons (based on the campaign):


 - typosquatting


 - impersonation


 - obfuscation

Compromised versions (4)

  • 2.0.0
  • 2.0.1
  • 2.0.2
  • 2.0.3

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.