Supply-chain attacksBriefConfirmed by two or more outlets

Hades campaign on PyPI (Graph ML / bioinformatics)

Including ensmallen 0.8.101. Memory scrapers, prompt-injection strings aimed at AI analysts, and a wiper deterrent.

Disclosed

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.