Back to miterion's feed

Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave (opens in new tab) 🐍Python

socket.dev··Covered in 7 articles·Open original

Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Read the original article

Sign in to keep reading the full article.

Covered in 7 articles

The Good, the Bad and the Ugly in Cybersecurity – Week 24

sentinelone.com·

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

securityweek.com·

Shai-Hulud Hades PyPI Campaign: 19 Packages Trojanized via Wheel Startup Hooks