Malicious code in ppkt2synergy (PyPI)
The package `ppkt2synergy` version 0.1.1 contains a malicious `.pth` file (`ppkt2synergy-setup.pth`) that executes a Bun-based credential stealer on every Python startup via CPython's `site.py` exec() mechanism. The payload downloads the Bun runtime from the official GitHub release page, then runs an obfuscated JavaScript stealer that exfiltrates environment variables, .env files, SSH keys, and cloud credentials to an attacker-controlled GitHub repository. This is part of the Hades/Miasma campaign (also called Shai-Hulud), attributed to the TeamPCP threat actor. Novel finding: `gpsea/_index.js` (same campaign) embeds CBRN-level dangerous-content text to trigger AI safety refusals in LLM-based security scanners, causing them to skip the file entirely. C2 IP: 20.207.73.82 Sentinel file: /tmp/.bun_ran MITRE ATT&CK: T1546.018 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6aaf8475393e38b34340b1c315fd6be8d9fa3978cd3c768fd606a0bdd3f926ba) The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: kam193 (d19f56d2a094e12c68d93451d28850565320597f40a8f320449200e919c8a9d3) Versions 0.1.1 were compromised. Compromised packages start an obfuscated infostealer. The infostealer is a heavily obfuscated JavaScript code executed using Bun runtime on Python startup. It collectes all kinds of sensitive data, including API keys, credentials to package repositories, cryptocurrency assets, password manager data. Infostealer actively queries online services to collect additional secrets as well as attempts to gain persistence and spread further by publishing infected packages using collected credentials. Data are exfiltrated likely using Github. The code seems to threaten to wipe the user's data if it detects invalid GitHub tokens. Cleanup should be done with caution. It seems to be related to the recent Mini Shai Hulud campaign. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-06-compr-woodpecker Reasons (based on the campaign): - compromised-package - exfiltration-env-variables - exfiltration-cloud-tokens - exfiltration-credentials - abuses-pth - obfuscation - infostealer - The package contains code to detect if it is running in a sandbox environment. - exfiltration-crypto - files-exfiltration - destructive-actions
AI Analysis
Technical Summary
The ppkt2synergy PyPI package version 0.1.1 includes a malicious .pth file (ppkt2synergy-setup.pth) that leverages CPython's site.py exec() mechanism to execute a Bun runtime-based JavaScript infostealer on every Python startup. This infostealer downloads the Bun runtime from GitHub, then runs heavily obfuscated JavaScript code that collects and exfiltrates environment variables, .env files, SSH keys, cloud credentials, cryptocurrency assets, and password manager data to an attacker-controlled GitHub repository. The campaign is linked to the TeamPCP threat actor and is part of the Hades/Miasma (Shai-Hulud) campaign. The malware attempts to detect sandbox environments, gain persistence, spread by publishing infected packages using stolen credentials, and may perform destructive actions if invalid GitHub tokens are detected. The malicious package affects version 0.1.1 and is confirmed by multiple sources. No official patch or remediation is provided; removal and cleanup should be done carefully due to destructive payload risks.
Potential Impact
This malicious package compromises the confidentiality of sensitive data by exfiltrating environment variables, cloud credentials, SSH keys, .env files, cryptocurrency assets, and password manager data. It also threatens data integrity and availability by potentially performing destructive actions if invalid tokens are detected. The malware attempts persistence and propagation by publishing infected packages using stolen credentials, increasing the risk of supply chain compromise. This can lead to widespread credential theft, unauthorized access to cloud and development environments, and potential data loss.
Mitigation Recommendations
No official patch or remediation is available for this malicious package. The recommended mitigation is to immediately remove the ppkt2synergy package version 0.1.1 from all environments. Due to the destructive nature of the payload, cleanup should be performed with caution. Monitor for the sentinel file /tmp/.bun_ran as an indicator of infection. Avoid using this package or any versions in the affected range. Review and rotate any potentially compromised credentials, keys, and tokens. Consider scanning for other packages related to the Hades/Miasma campaign. There is no vendor advisory indicating automatic mitigation or patch availability.
Malicious code in ppkt2synergy (PyPI)
Description
The package `ppkt2synergy` version 0.1.1 contains a malicious `.pth` file (`ppkt2synergy-setup.pth`) that executes a Bun-based credential stealer on every Python startup via CPython's `site.py` exec() mechanism. The payload downloads the Bun runtime from the official GitHub release page, then runs an obfuscated JavaScript stealer that exfiltrates environment variables, .env files, SSH keys, and cloud credentials to an attacker-controlled GitHub repository. This is part of the Hades/Miasma campaign (also called Shai-Hulud), attributed to the TeamPCP threat actor. Novel finding: `gpsea/_index.js` (same campaign) embeds CBRN-level dangerous-content text to trigger AI safety refusals in LLM-based security scanners, causing them to skip the file entirely. C2 IP: 20.207.73.82 Sentinel file: /tmp/.bun_ran MITRE ATT&CK: T1546.018 --- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6aaf8475393e38b34340b1c315fd6be8d9fa3978cd3c768fd606a0bdd3f926ba) The package was found to contain malicious code or consuming dependency that contains malicious code ## Source: kam193 (d19f56d2a094e12c68d93451d28850565320597f40a8f320449200e919c8a9d3) Versions 0.1.1 were compromised. Compromised packages start an obfuscated infostealer. The infostealer is a heavily obfuscated JavaScript code executed using Bun runtime on Python startup. It collectes all kinds of sensitive data, including API keys, credentials to package repositories, cryptocurrency assets, password manager data. Infostealer actively queries online services to collect additional secrets as well as attempts to gain persistence and spread further by publishing infected packages using collected credentials. Data are exfiltrated likely using Github. The code seems to threaten to wipe the user's data if it detects invalid GitHub tokens. Cleanup should be done with caution. It seems to be related to the recent Mini Shai Hulud campaign. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-06-compr-woodpecker Reasons (based on the campaign): - compromised-package - exfiltration-env-variables - exfiltration-cloud-tokens - exfiltration-credentials - abuses-pth - obfuscation - infostealer - The package contains code to detect if it is running in a sandbox environment. - exfiltration-crypto - files-exfiltration - destructive-actions
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The ppkt2synergy PyPI package version 0.1.1 includes a malicious .pth file (ppkt2synergy-setup.pth) that leverages CPython's site.py exec() mechanism to execute a Bun runtime-based JavaScript infostealer on every Python startup. This infostealer downloads the Bun runtime from GitHub, then runs heavily obfuscated JavaScript code that collects and exfiltrates environment variables, .env files, SSH keys, cloud credentials, cryptocurrency assets, and password manager data to an attacker-controlled GitHub repository. The campaign is linked to the TeamPCP threat actor and is part of the Hades/Miasma (Shai-Hulud) campaign. The malware attempts to detect sandbox environments, gain persistence, spread by publishing infected packages using stolen credentials, and may perform destructive actions if invalid GitHub tokens are detected. The malicious package affects version 0.1.1 and is confirmed by multiple sources. No official patch or remediation is provided; removal and cleanup should be done carefully due to destructive payload risks.
Potential Impact
This malicious package compromises the confidentiality of sensitive data by exfiltrating environment variables, cloud credentials, SSH keys, .env files, cryptocurrency assets, and password manager data. It also threatens data integrity and availability by potentially performing destructive actions if invalid tokens are detected. The malware attempts persistence and propagation by publishing infected packages using stolen credentials, increasing the risk of supply chain compromise. This can lead to widespread credential theft, unauthorized access to cloud and development environments, and potential data loss.
Mitigation Recommendations
No official patch or remediation is available for this malicious package. The recommended mitigation is to immediately remove the ppkt2synergy package version 0.1.1 from all environments. Due to the destructive nature of the payload, cleanup should be performed with caution. Monitor for the sentinel file /tmp/.bun_ran as an indicator of infection. Avoid using this package or any versions in the affected range. Review and rotate any potentially compromised credentials, keys, and tokens. Consider scanning for other packages related to the Hades/Miasma campaign. There is no vendor advisory indicating automatic mitigation or patch availability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- MAL-2026-5323
- Osv Schema Version
- 1.7.4
- Aliases
- []
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a50ba5668715ace4357eea3
Added to database: 07/10/2026, 09:24:38 UTC
Last enriched: 07/10/2026, 09:42:26 UTC
Last updated: 07/31/2026, 12:27:30 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.