Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-09 09:13 UTC
  • Importiert: 2026-06-16 07:20 UTC
  • Quelle-ID: thn_global
  • uid_hash: 9602ea24fd8346f78ec2440bd9bb51f57d038525b99eb8b45f71d63719539f35

Inhalt

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.

"The compromised releases shipped a *-setup.pth file that attempts to execute automatically

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews