Three progressively compromised versions of a Microsoft-adjacent Python package deliver a full-featured infostealer that spreads through AWS and Kubernetes, exfiltrates every cloud credential it can find, and wipes disks on Israeli and Iranian systems Category: Vulnerabilities & Threats
Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again!
calendar_today
May 19, 2026
domain
aikido-security