NewsPublished 9 Jun 2026

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

Source SecurityWeek

Description

The most recent variants of the self-propagating attacks are named Miasma and Hades. The post Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks appeared first on SecurityWeek .

Impact

The attacks enable credential harvesting from local systems and connected cloud services, allowing the malware to propagate by infecting additional packages accessible to compromised users. This compromises the integrity of open source supply chains in the NPM and PyPI ecosystems, potentially leading to widespread distribution of malicious code to downstream users and projects. The infection of critical ecosystems such as Red Hat’s Hybrid Cloud Console JavaScript ecosystem and bioinformatics and machine learning Python packages increases the risk of supply chain compromise in enterprise and scientific environments.

Defensive guidance

Security teams should monitor official advisories from affected package maintainers and ecosystem security teams such as NPM and PyPI. Given the nature of the attack, removing or updating infected packages once identified is recommended. Use of supply chain security tools that detect malicious package behavior and integrity violations may help mitigate risk. No vendor-provided official fix or temporary workaround is documented in the provided information.

Summary

Since September 2025, the Shai-Hulud worm has been used in multiple supply chain attack campaigns targeting open source software packages in NPM and PyPI. The Miasma variant, a descendant of Mini Shai-Hulud, acts as a multi-stage dropper executed during NPM installation, harvesting credentials and spreading by infecting packages the victim can access. The Hades variant similarly infects PyPI packages, using a startup execution file to fetch and run JavaScript code, also harvesting credentials and exfiltrating data via GitHub repositories. These attacks have affected over 100 packages and 471 malicious artifacts, including targeted attacks on Red Hat’s JavaScript ecosystem and various Python packages. The attacks use advanced evasion techniques such as splitting loaders and payloads to avoid detection. No explicit patch or vendor advisory is referenced in the source content.

References

securityweek.com/over-100-npm-pypi-packages-hit-in-new-shai-hulud-supply-chain-attacks/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 9 Jun 2026, 11:40 UTC

References

Community reviews