Threat Intelligence / Actor / Shai-Hulud

Shai-Hulud

As of 2026-08-25, Shai-Hulud is a threat actor tracked by Threadlinqs Intelligence across 1 threat spanning supply chain. Also known as Miasma operators (TeamPCP lineage), Mini Shai-Hulud, Miasma, Hades.

1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Miasma operators (TeamPCP lineage), Mini Shai-Hulud, Miasma, Hades, TeamPCP

Tracked threats

Shai-Hulud "Hades" Miasma Worm — New PyPI Wave: 37 Malicious Wheels Across 19 Packages Abuse *-setup.pth Startup Hook to Launch Bun-Powered Credential Stealer — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence