The threat is a malicious campaign, dubbed "Miasma Worm," distributing malware via newly published malicious packages on the Python Package Index (PyPI) repository. The article does not provide a CVSS score, specific affected or fixed version numbers, or a technical workaround for this ongoing supply chain attack.
2026-06-07 (Back to Inventory) Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave Author(s): Socket Organization: Socket js.shai_hulud Open article directly Open article on Archive.org Related Articles 2026-05-31 ⋅ Socket ⋅ Kirill Boychenko Famous Chollima Targets PHP Developers Through Compromised Packagist Package JADESNOW 2025-10-10 ⋅ Socket ⋅ Kirill Boychenko North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads BeaverTail InvisibleFerret 2025-07-14 ⋅ Socket ⋅ Kirill Boychenko Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader BeaverTail InvisibleFerret