Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack

On May 19, 2026, three malicious versions of Microsoft's official durabletask Python SDK were published to the PyPI package repository. The compromised package contained a 28 KB payload designed to steal credentials and sensitive data from multiple cloud and development platforms.\n\nThe malicious payload targeted credentials from AWS, Azure, Google Cloud Platform (GCP), Kubernetes, password managers, and over 90 developer tool configurations. Once executed, the payload would exfiltrate stolen data and attempt lateral movement through connected cloud infrastructure.\n\nThe attack exhibits a notable technical signature: the payload includes logic to skip execution on systems configured with Russian locale settings, a known indicator of Eastern European cybercriminal operations. The incident has been linked to the TeamPCP threat group, which was previously responsible for the Mini Shai-Hulud campaign.\n\nThis attack highlights the risk of compromised official package maintainer accounts and underscores the importance of supply chain security controls, including verification of package integrity and monitoring for unexpected package releases."