URL has been copied successfully!
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.”The compromised releases shipped a *-setup.pth file that attempts to execute automatically

First seen on thehackernews.com

Jump to article: thehackernews.com/2026/06/hades-pypi-attack-19-packages-poisoned.html

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link