NewsPublished 8 Jun 2026

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Source Bleeping Computer

Description

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-chain attack that delivered malware designed to steal developer secrets. [...]

Impact

The attack compromises developer workstations and CI/CD environments by stealing a broad range of sensitive credentials and secrets, including GitHub tokens, cloud service credentials (AWS, GCP, Azure), SSH keys, Docker credentials, and configuration files. This can lead to unauthorized access to source code repositories, cloud infrastructure, and other critical development and deployment resources. The persistence mechanisms and evasion techniques increase the difficulty of detection and removal. The widespread downloads of the affected packages imply a significant exposure risk to the developer community relying on these PyPI packages.

Defensive guidance

There is no explicit patch available for the compromised packages; remediation involves removing the affected packages and restoring environments from safe backups. Organizations should immediately rotate all potentially exposed secrets, including tokens, keys, and credentials. Defenders should monitor for Python packages containing executable .pth startup hooks, unexpected downloads of the Bun JavaScript runtime from GitHub, and process chains where Python launches Bun to execute the malicious JavaScript payload. Investigate and remediate persistence mechanisms such as systemd services on Linux and LaunchAgents on macOS. Follow vendor or security researcher advisories for updates on affected packages and further guidance.

References

bleepingcomputer.com/news/security/new-shai-hulud-attack-trojanizes-19-science-focused-pypi-packages/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 8 Jun 2026, 20:48 UTC

References

Community reviews