Mini Shai-Hulud

Three compromised versions of the Microsoft durabletask Python SDK (1.4.1, 1.4.2, 1.4.3) were published to PyPI, each downloading a stage-2 payload that steals credentials from AWS, Azure, GCP, Kubernetes, HashiCorp Vault, and password managers, then propagates to other hosts via SSM and kubectl exec.

discovered 2026-04-29

Objective

Steal developer, cloud, registry, or application credentials through malicious package execution.

Related campaigns

Packages

Indicators

Techniques

Read the full analysis →