OpenSSF/OSV advisory MAL-2024-1745 confirms this npm version as malicious. Malicious code in aliyundrive (npm)
Source
OpenSSF Malicious Packages via OSV
Summary
Malicious code in aliyundrive (npm)
Decision reason
OpenSSF Malicious Packages via OSV confirms aliyundrive@6.0.4 as malicious (MAL-2024-1745): Malicious code in aliyundrive (npm)