Tag: mcp developers

1 Attack Reports | 0 Vulnerabilities

Attack reports

Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

A sophisticated supply chain attack campaign has expanded to 471 affected artifacts across npm and PyPI, targeting developers through malicious packages. The campaign uses three distinct delivery methods: executable .pth startup hooks, trojanized native .abi3.so extensions that execute at import ti…
typosquatting
credential theft
pypi
supply chain attack
hades
ci/cd compromise
mini shai-hulud
2026-06-08
bioinformatics
bun runtime
miasma
javascript stealer
mcp developers
native extensions
Published: June 8, 2026
Downloadable IOCs: 2
Click here to see more Attack Reports