Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)

Source: kam193 459b9313aa2d453392e97f619a0ffb2898c3b90700e72dcb2cde4d1a1b97b1ac During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as well as .gitconfig to a remote target. --- Category: MALICIOU...

Malicious code in ai-labs-snippets-sdk (PyPI)

Source: kam193 2d5d4e1e66d1a84969c7af5822efb6e894abc0d263c87f583bf45591d216b85a During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as well as .gitconfig to a remote target. --- Category: MALICIOU...