Tag: bun runtime

2 Attack Reports | 0 Vulnerabilities

Attack reports

Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

A sophisticated supply chain attack campaign has expanded to 471 affected artifacts across npm and PyPI, targeting developers through malicious packages. The campaign uses three distinct delivery methods: executable .pth startup hooks, trojanized native .abi3.so extensions that execute at import ti…
typosquatting
credential theft
pypi
supply chain attack
hades
ci/cd compromise
mini shai-hulud
2026-06-08
bioinformatics
bun runtime
miasma
javascript stealer
mcp developers
native extensions
Published: June 8, 2026
Downloadable IOCs: 2

Miasma Worm Campaign Spreads with New PyPI Wave

A coordinated PyPI compromise campaign involving 37 malicious wheel artifacts across 19 packages was detected, utilizing Python startup hooks to execute credential-stealing payloads. The attack leverages .pth files for automatic execution during Python interpreter startup, downloads the Bun JavaScr…
credential theft
pypi
supply chain attack
hades
github exfiltration
mini shai-hulud
2026-06-07
bioinformatics
bun runtime
miasma
startup hooks
Published: June 7, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports