Microsoft durabletask PyPI Package Compromised: Critical Supply Chain Threat
A critical supply chain attack has compromised Microsoft's durabletask Python SDK on PyPI, affecting versions 1.14.1 and 0.30.4. The malicious package steals credentials and spreads through cloud infrastructure.
What happened
On May 19, 2026, three malicious versions of Microsoft's official durabletask Python SDK were published to PyPI. These compromised packages, versions 1.14.1 and 0.30.4, silently download and execute a 28 KB payload that steals credentials from AWS, Azure, GCP, Kubernetes, password managers, and over 90 developer tool configurations. The payload then spreads laterally through cloud infrastructure, skipping systems with a Russian locale.
The attack bypassed the repository's CI/CD pipeline and was uploaded directly to PyPI using a compromised publishing token. It has been linked to the TeamPCP threat group behind the Mini Shai-Hulud campaign. On June 5, 2026, the same compromised contributor account was used to push a malicious commit to the Azure/durabletask GitHub repository, planting configuration files that execute a credential-harvesting payload when opened in certain AI coding tools.
To assess your exposure, check if your projects are using versions 1.14.1 or 0.30.4 of the durabletask package. If so, pin to a non-affected version and rotate any secrets in affected environments immediately. Consult the primary sources for a detailed technical analysis and further recommendations.
How 0Day mitigates this
durabletask is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.