When Your AI Coding Assistant Becomes the Attack: The Hades Supply Chain Campaign

UNC6780/TeamPCP ran a multi-wave supply-chain campaign that hijacked open-source packages and developer environments to steal credentials (reported ~294,842 secrets from 6,943 machines), partnered with a ransomware group, and exfiltrated ~3,800 GitHub repos. Its latest Hades variant uses Python .pth startup hooks to execute a Bun runtime and persists by injecting instructions into AI coding assistant configurations so the assistant executes attacker code; it also uses prompt-injection comments to fool AI-based code reviewers. The report highlights that detection-first approaches (including AI review) are insufficient and advocates prevention-at-runtime to block execution before credentials are stolen.