Book a demo →
CyberXYZ Security Team

Security Research
& Threat Intel.

Analysis of supply-chain attacks, platform breaches, and emerging threats from the CyberXYZ detection engine.

Critical Supply Chain

Hades Campaign: A PyPI Worm Hunting AI and Bioinformatics Developers

The Hades branch of the Mini Shai-Hulud worm poisoned roughly 37 PyPI projects with a Python startup hook that downloads the Bun runtime and runs an obfuscated stealer for GitHub, cloud, and registry credentials. CyberXYZ ingested, flagged, and wave-clustered the campaign before public disclosure. Full attack chain, verified IOCs, and MITRE ATT&CK mapping.

CyberXYZ Security Team Threat Intelligence
11 min read

All Posts

Critical

Hades Campaign: PyPI Worm Hits AI and Bioinformatics Devs

A .pth startup hook runs a Bun-based credential stealer across 37 PyPI projects. Attack chain, verified IOCs, and hour-zero wave detection.

CyberXYZ Security Team 11 min
Critical

Mini Shai Hulud Returns: AntV npm Ecosystem Attack

Maintainer token compromise pushed malicious versions into 42 npm packages on May 19. Credential exfiltration, Sigstore forgery, and IOCs.

CyberXYZ Security Team 9 min
Critical

Vercel Security Incident: Context.ai OAuth Compromise

Full analysis of the Vercel breach via Context.ai OAuth compromise, including verified IOCs and remediation steps for affected teams.

CyberXYZ Security Team 8 min
Critical

Axios npm Attack: North Korean RAT via Compromised Maintainer

Malicious axios versions 1.14.1 and 0.30.4 deployed cross-platform RATs. Full IOCs, MITRE ATT&CK mapping, and remediation steps.

CyberXYZ Security Team 12 min
Coming Soon

Supply-Chain Attack Patterns in 2026

A data-driven look at how supply-chain attacks evolved in 2026, covering dependency injection, typosquatting, and maintainer takeover trends.

CyberXYZ Security Team
Coming Soon

How CyberXYZ Detects Zero-Day Package Threats

Under the hood of six detection signals, dependency graph analysis, and behavioral modeling that catches malicious packages before install.

CyberXYZ Security Team
👋

Let's Talk

Want to learn how CyberXYZ protects your supply chain? We'd love to hear from you. Reach out and let's have a conversation.

Get in touch Get Secure