Microsoft’s Durabletask PyPI Attack: Mini Shai-Hulud Saga Continues.
Date Observed: May 19, 2026Ecosystem: PyPI (Python)Targets: CI/CD runners, cloud workloads, Kubernetes clusters, developer environments consuming durabletaskAttack Type: Supply chain compromise via stolen PyPI publishing token; import-time malicious loader with multi-stage payloadImpact: Multi-cloud credential theft (AWS, Azure, GCP, Kubernetes, HashiCorp Vault, password managers); lateral movement via AWS SSM and kubectl exec; geotargeted disk wiper; persistent […]