Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

**Executive Summary:** Socket Threat Research documents a fast-moving supply-chain campaign (Mini Shai-Hulud / Miasma / Hades) that added 23 new malicious PyPI artifacts to a broader set of 471 affected npm/PyPI artifacts; the campaign uses varied delivery techniques (.pth startup hooks, trojanized .abi3.so native extensions, and staged loader/payload designs) to run an obfuscated JavaScript stealer via Bun and harvest high-value secrets from developer workstations and CI/CD environments.