Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels (opens in new tab) 🤖LLM applications, prompt engineering
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.
Read the original article