National Cyber Warfare Foundation (NCWF)

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer


0 user ratings
2026-06-09 10:46:09
milo
Attacks
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.

"The compromised releases shipped a *-setup.pth file that attempts to execute automatically



Source: TheHackerNews
Source Link: https://thehackernews.com/2026/06/hades-pypi-attack-19-packages-poisoned.html


Comments
new comment
Nobody has commented yet. Will you be the first?
 
Forum
Attacks



Copyright 2012 through 2026 - National Cyber Warfare Foundation - All rights reserved worldwide.