The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.
"The compromised releases shipped a *-setup.pth file that attempts to execute automatically
source https://thehackernews.com/2026/06/hades-pypi-attack-19-packages-poisoned.html
Tuesday, June 9, 2026
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box