Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
- Posted on June 9, 2026
- By The Hacker News
- 2 Views
- 1 min read
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
Hades, a new PyPI branch of the Mini Shai-Hulud/Miasma supply chain campaign, hit 37 malicious wheels across 19 packages.
