Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential… | HappeningNow.news
Breaking

Cybersecurity · 47 views

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

Hades, a new PyPI branch of the Mini Shai-Hulud/Miasma supply chain campaign, hit 37 malicious wheels across 19 packages.

Source Summary Published June 9, 2026 Brief Under 1 min brief
Story intelligence
Coverage Single outlet Single-outlet story
Views 47 Community interest
Brief read Under 1 min brief 45 words

Summary

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.

Read original at The Hacker News

Coverage Context

Part of Pypi coverage 21 tracked stories

More from Cybersecurity

Continue reading recent Cybersecurity coverage

Support HappeningNow

Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.

Support HappeningNow

Report an issue with this page