Malware campaign targets bioinformatics, MCP developers

Attackers are weaponizing compiling pipelines and LLM safety filters, turning typical developer tools (like Bun and native extensions) and AI triage logic against the systems meant to protect them.

• –Native compiled extensions (.abi3.so) bypass traditional static source-code analysis, exploiting the common presence of compiled code in scientific and genomic libraries.
• –The use of .pth startup hooks decouples the loader from the payload, executing Bun dynamically to keep the wheel footprint small.
• –Embedding fake policy-violating prompts in comments directly targets LLM-first scanners, demonstrating a growing sophistication in anti-AI analysis techniques.
• –Compromising MCP (Model Context Protocol) packages highlights that developers building next-gen AI integrations are now prime targets for supply chain attacks.