Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
A new supply chain attack, dubbed Hades, is leveraging the Miasma campaign to compromise 37 PyPI packages, including those used in bioinformatics and computational biology. The attack utilizes a malicious setup.pth file to automatically install and execute a JavaScript payload designed to steal developer credentials from various platforms, including GitHub, npm, and cloud providers. This campaign employs techniques similar to previous Shai-Hulud and Miasma attacks, focusing on abusing trusted package channels and exploiting dependency installation processes.
The Hades campaign, originating from the Miasma supply chain, has resulted in the poisoning of 37 packages within the Python Package Index (PyPI). These packages, including bramin, cmd2func, and coolbox, were designed to automatically execute a JavaScript payload upon Python startup. This payload downloads and runs the Bun JavaScript runtime, which then steals a wide range of credentials from developer systems. The stolen data includes secrets related to GitHub, npm, and other popular platforms, as well as Docker configurations, Vault tokens, and SSH keys. The attackers are exploiting the 'site' module in Python to execute the malicious code before the user has a chance to review or invoke the package, mirroring the tactics used in previous Shai-Hulud and Miasma attacks. Notably, the campaign incorporates an AI defense evasion technique, attempting to mislead AI security scanners with prompt injection and GitHub commit analysis to bypass detection.