Miasma Worm Campaign Spreads with New PyPI Wave

Reported 07 Jun 2026 by otx · Severity: medium

A coordinated PyPI compromise campaign involving 37 malicious wheel artifacts across 19 packages was detected, utilizing Python startup hooks to execute credential-stealing payloads. The attack leverages .pth files for automatic execution during Python interpreter startup, downlo