Supply ChainJun 9, 2026

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Shai-Hulud worm infects over 100 NPM and PyPI packages with Miasma and Hades variants.

New variants of the Shai-Hulud supply chain attack, named Miasma and Hades, have compromised over 100 packages in the NPM and PyPI ecosystems. These self-propagating worms target open-source software, stealing credentials and API keys to spread further. The attack has seen a surge since the source code was released in May, with notable incidents affecting Red Hat's ecosystem and numerous bioinformatics and machine learning packages.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

Vendor Watch

Run Red Hat?

Get an email when a new story names Red Hat, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

The lesson from this incident

Full lesson

The Shai-Hulud attack variants demonstrate how malicious code can infiltrate trusted open-source repositories and self-propagate by stealing credentials and API keys. These worms specifically target NPM and PyPI ecosystems, affecting over 100 packages including critical infrastructure used by major organizations like Red Hat. The attack's ability to spread autonomously through compromised developer credentials makes it particularly dangerous, as each infected package becomes a vector for further compromise. Organizations relying on open-source packages without proper vetting and monitoring face significant risk of credential theft and unauthorized access to their development environments.

What helps against this

How we list vendors

Snyk research Socket research Sonatype research

Secrets management
API keys, tokens and passwords stop leaking from code, chat and configuration files.
For exampleGitHub Advanced Security HashiCorp Vault Palo Alto Networks Idira Secrets Management all options
Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
For exampleSentinelOne Singularity Endpoint Microsoft Defender for Endpoint Bitdefender GravityZone all options
Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
For exampleJFrog Curation GitHub Advanced Security JFrog Xray all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

malware — Miasma
malware — Hades

Entities

TeamPCP (threat_actor)Shai-Hulud (campaign)NPM (product)PyPI (product)Hybrid Cloud Console (product)Red Hat (vendor)