Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
Summary: The Hades campaign planted 37 malicious wheel artifacts across 19 PyPI packages, shipping a *-setup.pth file that runs automatically at Python startup, downloads the Bun JavaScript runtime from GitHub, and executes an obfuscated JavaScript stealer named _index.js. The stealer harvests GitHub, npm, PyPI, RubyGems, JFrog, CircleCI, Anthropic, AWS, GCP, Azure, and Kubernetes secrets along with Docker configurations, Vault tokens, SSH keys, shell histories, .env, .npmrc, .pypirc, and Claude/MCP configurations, and the malware checks for a Russian locale before running.
Bottom line: The payload executes on install through Python's site module, so a developer never has to import the poisoned package for credentials to leave the building. Socket notes the core playbook is unchanged from Shai-Hulud and Miasma: abuse trusted package channels, run before normal package use, and exfiltrate through GitHub.
Read the original at The Hacker News ↗
- Topics
- Cloud Security
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026