Digital Warfare Podcast Daily Brief June 09, 2026

The Digital Warfare Podcast · Jun 9, 2026 · 5m · transcript

Summary

The Shai-Hulud supply chain campaign has expanded to 23 newly identified malicious PyPI package artifacts, with explicit targeting of developers building Model Context Protocol and AI integrations. Identified by Socket Threat Research, the broader operation now spans 471 total artifacts across npm and PyPI. The new wave introduces three distinct delivery branches - a .pth startup hook, a native binary extension trigger, and a novel split-staging architecture that separates loader from payload to defeat co-location detection rules. The Hades-family payload aggressively harvests…