Back Technadu

New PyPI Wave in Mini Shai-Hulud, Miasma, and Hades Campaign

Technadu • June 9, 2026

Socket Threat Research has identified a newer PyPI wave connected to the broader Mini Shai-Hulud, Miasma, and Hades supply chain attacks. This wave adds 23 newly identified PyPI package-version artifacts targeting bioinformatics and MCP developers.

These add to the 37 malicious PyPI wheels covered in the earlier report. The campaign tracker now includes 471 affected artifacts across npm and PyPI, comprising 411 npm artifacts across 106 packages and 60 PyPI artifacts across 37 packages.

The new set includes six bioinformatics packages, a separate cluster of AI and MCP-themed packages, typosquat-style packages such as “rsquests,” “tlask,” and “rlask,” and a langchain-core-mcp loader variant that does not bundle the expected _index.js payload, according to Socket.

The weekend PyPI wave used executable .pth startup hooks. The newer bioinformatics subcluster uses trojanized native .abi3.so extensions that execute the JavaScript payload at import time.

The bioinformatics cluster affects real packages used in graph learning, patient phenotyping, phenopacket tooling, and related scientific workflows. Other artifacts and several MCP-themed packages appear to be designed to capture installs of popular Python packages, including Flask, requests, LangChain, OpenAI, tokenization, and MCP tooling.

The payload follows the Hades pattern : a heavily obfuscated JavaScript stealer staged through Bun. Once executed, it targets developer workstations and CI/CD environments for GitHub, npm, PyPI, RubyGems, JFrog, cloud credentials, Kubernetes service account material, SSH keys, Docker configuration, shell histories, .env files, package registry credentials, and AI developer tool configuration.

Last week, over 30 Red Hat npm packages were backdoored with a new Miasma variant of the Shai-Hulud malware.

Last month, the first clones of the Shai-Hulud worm emerged in the npm supply chain days after TeamPCP released the source code and claimed the TanStack supply chain attack-related Mistral AI breach . Also, GitHub investigated the TeamPCP 4,000-repository breach claim.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into legitimate packages, which execute during installation to steal sensitive credentials from developers and CI/CD environments. The malware collects data such as GitHub tokens, npm credentials, and cloud secrets, exfiltrating them via public GitHub repositories. Researchers have linked this campaign to the TeamPCP threat actor group, known for similar tactics in previous attacks. At least four SAP-related npm packages have been confirmed as compromised, with the malicious payload being designed to propagate further across the npm ecosystem. The attack is ongoing, and organizations are advised to review their environments for affected packages and rotate any exposed secrets. 753 sources 71

Extracted Entities

New PyPI Wave in Mini Shai-Hulud, Miasma, and Hades Campaign

The full story

Extracted Entities

Attack Types (4)

Campaigns (1)

Companies (1)

Domains (1)

Malware (3)

MITRE ATT&CK (3)

Platforms (4)

Tools (3)