Back to Intel

Intel Node

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

lowmalware2026-06-09T09:13:32+00:00source excerpt
malware

Source excerpt · The upstream feed supplied only part of this article.Read the original source →

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.

Read Original Source