New Shai-Hulud Attack Compromises 23 PyPI Packages to Target MCP Developers

A new wave of the Shai-Hulud supply chain campaign, adding 23 newly discovered malicious PyPI package-version artifacts to an already alarming operation that previously compromised 37 packages. The broader campaign identified by the Socket Threat Research team, tracked across the Mini Shai-Hulud, Miasma, and Hades threat clusters, now spans 471 total artifacts across npm and PyPI, comprising […] The post New Shai-Hulud Attack Compromises 23 PyPI Packages to Target MCP Developers appeared first on Cyber Security News.