← Themen

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

EXPIRED 55.0 2026-06-10T07:00
Score-Aufschlüsselung
100
novelty
25
reach
35
concrete_impact
65
emotional_hook
70
source_quality
45
platform_fit
Zusammenfassung

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems. "The compromised releases shipped a *-setup.pth file that attempts to execute automatically

Skripte (0)

b6b0b221…
Noch kein Skript generiert.

Score 55.0 — unter Schwellwert (65)