UnratedPyPIAmendedPublished
Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)
GHSA-93qj-5q5v-3c2h
- Affected
- PyPI pantheon-agents >= 0.6.1, <= 0.6.2
- Fixed in
- 0.6.4· Vendor fix available
- Issue
- The PyPI account that publishes pantheon-agents was compromised in the June 2026 "Hades" PyPI supply-chain attack (Mini Shai-Hulud / Miasma lineage). The attacker used a stolen, long-lived PyPI API token to upload trojanized releases pantheon-agents 0.6.1 and 0.6.2 directly to PyPI. Only the PyPI artifacts are affected. The GitHub source repository, its git tags, and all other distribution channels are clean — no malicious code was committed to the repository. Affected - pantheon-agents 0.6.1 and 0.6.2 on PyPI. Not affected: installs from the GitHub source, version 0.6.0 and earlier, and the Desktop / Online apps. Indicators of compromise The malicious wheels ship a -setup.pth file that executes on Python startup. It downloads the Bun JavaScript runtime and runs an obfuscated credential stealer (index.js) that harvests and exfiltrates credentials reachable from the host — environment variables, ~/.pypirc, ~/.npmrc, cloud credentials (~/.aws, etc.), SSH keys, and API tokens.…
Recommended action: Upgrade to 0.6.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.