Tensorlake (Organization): news timeline & CVEs

Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Shai-Hulud infected Tensorlake’s npm SDK 0.5.144, stealing credentials before the package was removed within minutes.

Researchers found the Shai-Hulud credential-hijacking worm in Tensorlake SDK npm package 0.5.144, which has about 12,000 weekly downloads. The ChainDrop-related build steals crypto wallets, browser passwords, GitHub Actions secrets, cloud credentials, and service-account tokens, then keeps a command-and-control channel. Socket says it was flagged 11 minutes after publication; npm and Tensorlake removed it and released 0.5.145. The installer can execute on a developer machine or build server outside Tensorlake’s sandbox, and a token monitor may delete a home directory if certain GitHub tokens are revoked.

The Register · Security16:54 UTC · 6h agoMalware in the wild 6 sources

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Malicious tensorlake@0.5.144 on npm delivers a Shai-Hulud worm that steals developer secrets and can wipe hosts.

Aikido reported that npm package tensorlake version 0.5.144, published on 8 October 2026, contains a new Shai-Hulud worm variant. A preinstall script downloads the Bun runtime and runs an obfuscated payload that harvests cloud, CI/CD, SSH, Vault, GitHub, browser, and cryptocurrency-wallet secrets. Stolen data can be sent to iseekaigogo[.]com or to an address retrieved from an actor-controlled Ethereum contract. The payload can also wipe infected machines if an embedded GitHub token is revoked; PyPI and Cargo distributions were not compromised.

Cyber Security Newsupdated 16:54 UTC · 6h agofirst 15:50 UTC · 7h agoMalware in the wild 6 sources

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

Attackers published a malicious tensorlake npm package that spreads a new Shai-Hulud supply-chain worm.

A threat actor published tensorlake npm version 0.5.144 on October 8, 2026, embedding a new self-replicating Shai-Hulud worm. Its preinstall hook runs obfuscated JavaScript that downloads the Bun runtime and steals environment variables, npm and GitHub tokens, cloud and SSH keys, Kubernetes and CI/CD secrets, and data from 14 cryptocurrency browser extensions. Stolen publishing credentials can spread the worm, and a dead-man’s switch can wipe hosts if an embedded GitHub token is revoked. The package was seeded via commits on Tensorlake’s GitHub; PyPI and Cargo builds were not compromised, and the npm package has over 100,000 lifetime installs.

GBHackersupdated 16:54 UTC · 6h agofirst 13:30 UTC · 10h agoMalware in the wild 6 sources

Tensorlake

Timeline3 articles

Appears with

Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware