Shai-Hulud Campaign Evolution: Miasma, Hades, and AI Scanner Evasion

Zscaler ThreatLabz describes the Shai-Hulud supply-chain campaign that progressed from maintainer-focused npm compromises into CI/CD and PyPI abuse, leveraging .pth persistence, OIDC token scraping in GitHub Actions to produce valid SLSA-attested malicious packages, IDE-configuration execution vectors, and prompt-injection to bypass LLM-based scanners; the actor (linked to TeamPCP/UNC6780 for early waves) publicly released the worm source on May 12, 2026, amplifying the threat and encouraging copycats, and the report includes detailed mitigation guidance and IOCs.