Murphy R on Mythryl: “Watch out for Hades According to Reddit, horrible people have made a…”

Watch out for Hades According to Reddit, horrible people have made a nasty supply-chain attack called Hades: Looks like it's marked at this time by:... https://mrmurphy.dev/watch-out-for-hades/

mrmurphy.devWatch out for HadesAccording to Reddit, horrible people have made a nasty supply-chain attack called Hades: Looks like it's marked at this time by: the presence of suspicious *-setup.pth files in your python site-packages A suspicious .bun_ran marker in your tmp dirs Weird instructions in your agent harnesses or config files If you find any of these things, you'll want to disable your network connection immediately, clean them up fully, and then rotate any and all credentials your computer had on-disk. Looking for trouble You can ask your agent to look for these things for you, but it's possible that malicious instructions could alter the agent's behavior to try to conceal the bad stuff, so here's a script you can read yourself (hah, as if Bash were readable) to check for the symptomatic files in site-packages and tmp, and to give you a list of agent config files for you to check manually for "weird instructions".

11/6/26, 9:11 pm0 reposts0 likes

Post