TLDR Tech / InfoSec
Hades Cluster PyPI Worm Abuses Python Startup Hooks
On June 7, Socket disclosed that attackers gained publishing authority over 19 legitimate scientific and deep-learning packages and uploaded 37 malicious wheels that drop a hades-setup.pth file into site-packages. These wheels exploit Python's path configuration hook to automatically execute _index.js via a bootstrapped Bun runtime at interpreter startup, without any explicit import by the developer. The credential stealer harvested AWS, GCP, and Azure cloud tokens, along with GitHub, npm, and SSH keys, exfiltrated data to attacker-created GitHub repositories labeled "Hades - The End for the Damned", and emitted decoy HTTPS traffic to Anthropic API endpoints to obscure the egress channel. Defenders should audit requirements.txt, poetry.lock, and local site-packages for affected package names (including bramin, executor-engine, executor-http, funcdesc, coolbox, dynamo-release, and magique, among others), treat any environment containing a matched version as fully compromised, rotate all reachable cloud and VCS tokens immediately, and hunt for the IOCs hades-setup.pth and _index.js, along with unexpected Bun runtime downloads, in CI/CD process logs.
Read the full story