Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-27 · source-backed
The PyPI account publishing pantheon-agents was compromised in the June 2026 "Hades" PyPI attack, and a stolen long-lived API token uploaded trojanized 0.6.1 and 0.6.2 releases directly. The wheels ship a *-setup.pth that runs on Python startup, downloads the Bun runtime, and executes an obfuscated stealer harvesting environment variables, ~/.pypirc, ~/.npmrc, ~/.aws, SSH keys and API tokens (GitHub Advisory). Only the PyPI artifacts are affected; the git repo, its tags and every other channel are clean. A source install or 0.6.0 is safe. The .pth execution trick is the part to remember, because it runs before anything imports your package.
Each link below shares sources, entities, or timing with this story.
Markitdown uses Python / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Markitdown uses Python); both cover GitHub; reported by the same outlet (github.com).
Shared entities / Shared topic / Earlier coverage
Both cover PyPI, Python, SSH; overlapping topics (attack, compromised, pypi); earlier PyPI coverage from 2026-04-01.
RuView deprecates Python / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (RuView deprecates Python); both cover GitHub, Python; reported by the same outlet (github.com).
Claude Code uses Python / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover GitHub, Python; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Python); both cover GitHub, Python; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses Python); both cover GitHub, Python; reported by the same outlet (github.com).
Claude Code uses Python / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses Python); both cover Hades, PyPI; overlapping topics (attack, compromised).
Scrapling uses Python / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Scrapling uses Python); both cover GitHub, Python; reported by the same outlet (github.com).