CLEAREX.MARKET
Join free
Tools MarketplaceMarket NewsForumDonation Club
Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
Regulatory ActionPublic

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

The Hacker NewsยทJune 9, 2026ยท1 min read
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems. "The compromised releases shipped a *-setup.pth file that attempts to execute automatically
Read full article on The Hacker News โ†’

Follow broker incidents, regulatory actions & market intelligence

Stay ahead with CLEAREX.MARKET

View all intelligence โ†’