Malicious code in aliyun-ai-labs-snippets-sdk (PyPI)

Source: kam193 459b9313aa2d453392e97f619a0ffb2898c3b90700e72dcb2cde4d1a1b97b1ac During the importing, it loads a file pretending to an AI model. This file contains pickle-serialized code that exfiltrates data basic IP/username info, as well as .gitconfig to a remote target. --- Category: MALICIOU...