hermes-px PyPI steals AI conversations

SafeDep: hermes-px on PyPI steals AI conversations via triple-encrypted
exfiltration to Supabase, routing through a hijacked university
endpoint. Name-squatting on “Hermes” AI tooling.

Mapped techniques

T0129 Typosquatting
T0109 Publish malicious artifact
T0200 Proprietary data stolen

supply-chain ai conversation theft

T0129 · Initial Access · Typosquatting

hermes-px on PyPI.

T0109 · Resource Development · Publish malicious artifact

Triple-encrypted exfil to Supabase.

T0200 · Impact · Proprietary data stolen

AI conversation contents.

Sources

https://safedep.io/malicious-hermes-px-pypi-ai-conversation-stealer