pantheon-agents

A framework for building distributed evolvable multi-agent system.

View on Pypi

View on Github

Activity

Latest release: 2mo ago
Total releases: 18
Cadence: ~4 days
Last 12 months: 14

Reach

Stars: —

Details

License: MIT
First release: Aug 15, 2025

Releases

Version	Released
`0.6.4` patch	Jul 06, 2026
`0.6.0` minor	May 24, 2026
`0.5.3` patch	Apr 22, 2026
`0.5.2` patch	Apr 14, 2026
`0.5.1` patch	Apr 10, 2026
`0.5.0` minor	Mar 22, 2026
`0.4.10` patch	Mar 16, 2026
`0.4.9` patch	Mar 10, 2026
`0.4.8` patch	Mar 06, 2026
`0.4.7` patch	Mar 05, 2026
`0.4.6` patch	Mar 05, 2026
`0.4.5` patch	Mar 04, 2026
`0.4.4` patch	Mar 02, 2026
`0.4.3` minor	Mar 02, 2026
`0.3.3` patch	Aug 25, 2025
`0.3.3rc1` pre	Aug 25, 2025
`0.3.2` patch	Aug 21, 2025
`0.3.0` initial	Aug 15, 2025

Repository

aristoteleo/pantheon-agents

Forks: —
Open issues: —

Dependencies (64)

Depends on

0.6.4

Used by

Supply-chain exposure

2 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (2)

GHSA-93qj-5q5v-3c2h Aug 26, 2026

Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)

Critical

Summary

The PyPI account that publishes pantheon-agents was compromised in the June 2026 "Hades" PyPI supply-chain attack (Mini Shai-Hulud / Miasma lineage). The attacker used a stolen, long-lived PyPI API token to upload trojanized releases pantheon-agents 0.6.1 and 0.6.2 directly to PyPI.

Only the PyPI artifacts are affected. The GitHub source repository, its git tags, and all other distribution channels are clean — no malicious code was committed to the repository.

Affected

pantheon-agents 0.6.1 and 0.6.2 on PyPI.

Not affected: installs from the GitHub source, version 0.6.0 and earlier, and the Desktop / Online apps.

Indicators of compromise

The malicious wheels ship a *-setup.pth file that executes on Python startup. It downloads the Bun JavaScript runtime and runs an obfuscated credential stealer (_index.js) that harvests and exfiltrates credentials reachable from the host — environment variables, ~/.pypirc, ~/.npmrc, cloud credentials (~/.aws, etc.), SSH keys, and API tokens.

Check your environment's site-packages for an unexpected *-setup.pth, and your home directory for _index.js or a Bun runtime (~/.bun).

Impact

Anyone who pip installed pantheon-agents 0.6.1 or 0.6.2 should assume every credential present on that machine has been exfiltrated.

Remediation

Do not install pantheon-agents from PyPI until distribution resumes.

If you installed 0.6.1 or 0.6.2:

Run pip uninstall pantheon-agents immediately and check for the IoCs above.

Rotate every credential that was present on that machine (API keys, tokens, SSH keys, cloud credentials).

Install only from the clean GitHub source:
pip install "git+https://github.com/aristoteleo/PantheonOS.git"

Status

The PyPI account is suspended and the malicious token has been disabled. PyPI distribution will resume after account recovery and migration to PyPI Trusted Publishing (OIDC). Sibling projects by the same maintainer (e.g. executor-engine, funcdesc, cmd2func, pantheon-toolsets, coolbox, ufish, magique, executor-http) were hit by the same campaign and are being remediated separately.

Fixed in

0.6.4

References

https://github.com/aristoteleo/PantheonOS/security/advisories/GHSA-93qj-5q5v-3c2h
https://github.com/aristoteleo/PantheonOS

Updated Aug 26, 2026 · Source: OSV.dev
PYSEC-2026-607 MAL-2026-5299 Jul 01, 2026

Malicious code in pantheon-agents (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of pantheon-agents were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload (via the Bun runtime) on import that harvests and exfiltrates credentials and attempts self-propagation. This entry is a summary; behavior may not be fully characterized here. See the linked references for detailed analysis and indicators of compromise.

Affected versions

0.6.10.6.2

References

https://inspector.pypi.io/project/pantheon-agents/0.6.2/packages/79/8e/574d52f7284699283d5365a384263d22c96be8256814d048d8d2df9d2ada/pantheon_agents-0.6.2-py3-none-any.whl//pantheon_agents-setup.pth
https://www.endorlabs.com/learn/shai-hulud-hades-wave-hits-six-pypi-bioinformatics-packages
https://www.stepsecurity.io/blog/the-hades-campaign-pypi-packages

Updated Jul 02, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

minor 3
patch 13
pre 1

18 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More