The Hades supply chain campaign has compromised 37 packages on the Python Package Index (PyPI), deploying obfuscated JavaScript stealers to harvest sensitive developer credentials and CI/CD secrets.

Key Points

• Attackers injected malicious code into 37 PyPI packages, including tools for bioinformatics and computational biology, to execute payloads during installation.
• The malware downloads the Bun JavaScript runtime to execute obfuscated scripts that scrape credentials for GitHub, AWS, GCP, Azure, and various AI development tools.
• New persistence mechanisms include *-setup.pth files and "__init__.py" hooks that trigger execution before a package is even imported by the user.
• The campaign employs novel evasion techniques, such as prompt injection to deceive AI-based security scanners and memory scraping for macOS and Windows systems.
• Stolen data is exfiltrated via GitHub repositories, and the malware includes a "gh-token-monitor" service that wipes local files if a compromised token is revoked.

Why it Matters

This campaign demonstrates that attackers are successfully evolving supply chain tactics to bypass traditional security controls and exploit the trust placed in open-source package registries. By targeting developer environments and CI/CD pipelines, these threats can lead to widespread credential theft and unauthorized access to critical cloud infrastructure and proprietary codebases.