tensorlake (Product): news timeline & CVEs

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Malicious tensorlake@0.5.144 on npm delivers a Shai-Hulud worm that steals developer secrets and can wipe hosts.

Aikido reported that npm package tensorlake version 0.5.144, published on 8 October 2026, contains a new Shai-Hulud worm variant. A preinstall script downloads the Bun runtime and runs an obfuscated payload that harvests cloud, CI/CD, SSH, Vault, GitHub, browser, and cryptocurrency-wallet secrets. Stolen data can be sent to iseekaigogo[.]com or to an address retrieved from an actor-controlled Ethereum contract. The payload can also wipe infected machines if an embedded GitHub token is revoked; PyPI and Cargo distributions were not compromised.

Cyber Security Newsupdated 16:54 UTC · 6h agofirst 15:50 UTC · 7h agoMalware in the wild 6 sources

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

Attackers published a malicious tensorlake npm package that spreads a new Shai-Hulud supply-chain worm.

A threat actor published tensorlake npm version 0.5.144 on October 8, 2026, embedding a new self-replicating Shai-Hulud worm. Its preinstall hook runs obfuscated JavaScript that downloads the Bun runtime and steals environment variables, npm and GitHub tokens, cloud and SSH keys, Kubernetes and CI/CD secrets, and data from 14 cryptocurrency browser extensions. Stolen publishing credentials can spread the worm, and a dead-man’s switch can wipe hosts if an embedded GitHub token is revoked. The package was seeded via commits on Tensorlake’s GitHub; PyPI and Cargo builds were not compromised, and the npm package has over 100,000 lifetime installs.

GBHackersupdated 16:54 UTC · 6h agofirst 13:30 UTC · 10h agoMalware in the wild 6 sources

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Compromised tensorlake npm 0.5.144 delivered the Shai-Hulud worm to steal secrets and spread to other packages.

Socket and StepSecurity reported that tensorlake npm version 0.5.144 was compromised in the ChainDrop/Shai-Hulud campaign and later removed from the registry. A preinstall hook launched an obfuscated Bun loader that runs a self-propagating credential worm, Math_Symbol.js. The malware steals npm, GitHub, AWS, Vault, Kubernetes, SSH, cryptocurrency, and AI-assistant secrets, drops HackBrowserData, persists, and can execute remote code. It republishes infected packages, resolves C2 iseekaigogo.com through an Ethereum contract, stages data in public GitHub repositories, and may run a destructive PowerShell handler if a stolen GitHub token is revoked.

The Hacker Newsupdated 16:54 UTC · 6h agofirst 05:46 UTC · 17h agoMalware in the wild 6 sources2

tensorlake

Timeline3 articles

Appears with

Tensorlake npm Package Compromised to Spread Shai-Hulud Worm and Steal Developer Secrets

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm