During June 2026, the OSSF/malicious-packages project advanced threat intelligence capabilities by delivering a dedicated feature to identify and surface malicious PyPI indicators. The team added five JSON assets detailing compromised packages related to the Hades/Miasma supply-chain campaign, with each package containing a hidden .pth payload that executes a credential-stealing routine on Python startup. This work enhances detection, risk scoring, and user notification, enabling faster response to emerging threats across downstream projects. The deliverable strengthens governance and incident readiness by providing concrete indicators of compromise and clear provenance for audits. Business value includes reduced time-to-detection, improved dependency hygiene, and informed policy decisions for package management. The change was implemented with a single, well-documented commit (49344123a43213051d63d36c7074fdf3eca8c505) and explicit attribution to Rohit Kumar and Caleb Brown.