Hades campaign targets PyPI with Shai Hulud inspired malware

The article discusses a recent cyberattack campaign, dubbed the 'Hades' campaign, targeting the Python Package Index (PyPI) with malicious software inspired by the Shai-Hulud worm. The attacks affected 37 PyPI wheels across 19 packages, demonstrating the ongoing evolution of supply chain threats. The Shai-Hulud worm is known for being self-propagating and info-stealing, allowing attackers to publish poisoned software versions and harvest developer credentials.

New techniques presented in this campaign include using obfuscated JavaScript payloads and exploiting Python's .pth files for executing malicious code during installations. Cybersecurity experts recommend organizations audit their systems and ensure continuous monitoring to mitigate risks associated with the Shai-Hulud malware.