Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave

socket.dev · · Covered in 7 articles from 7 sources

The Good, the Bad and the Ugly in Cybersecurity – Week 24

sentinelone.com·

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

securityweek.com·

Shai-Hulud Hades PyPI Campaign: 19 Packages Trojanized via Wheel Startup Hooks

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

thehackernews.com·

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

bleepingcomputer.com·

Massive PyPI Supply Chain Attack Harvests Cloud Credentials via Python Startup Hooks

orca.security·

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

news.risky.biz·