Tensorlake (Victim): news timeline & CVEs

Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Shai-Hulud infected Tensorlake’s npm SDK 0.5.144, stealing credentials before the package was removed within minutes.

Researchers found the Shai-Hulud credential-hijacking worm in Tensorlake SDK npm package 0.5.144, which has about 12,000 weekly downloads. The ChainDrop-related build steals crypto wallets, browser passwords, GitHub Actions secrets, cloud credentials, and service-account tokens, then keeps a command-and-control channel. Socket says it was flagged 11 minutes after publication; npm and Tensorlake removed it and released 0.5.145. The installer can execute on a developer machine or build server outside Tensorlake’s sandbox, and a token monitor may delete a home directory if certain GitHub tokens are revoked.

The Register · Security16:54 UTC · 6h agoMalware in the wild 6 sources

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

Attackers published a malicious tensorlake npm package that spreads a new Shai-Hulud supply-chain worm.

A threat actor published tensorlake npm version 0.5.144 on October 8, 2026, embedding a new self-replicating Shai-Hulud worm. Its preinstall hook runs obfuscated JavaScript that downloads the Bun runtime and steals environment variables, npm and GitHub tokens, cloud and SSH keys, Kubernetes and CI/CD secrets, and data from 14 cryptocurrency browser extensions. Stolen publishing credentials can spread the worm, and a dead-man’s switch can wipe hosts if an embedded GitHub token is revoked. The package was seeded via commits on Tensorlake’s GitHub; PyPI and Cargo builds were not compromised, and the npm package has over 100,000 lifetime installs.

GBHackersupdated 16:54 UTC · 6h agofirst 13:30 UTC · 10h agoMalware in the wild 6 sources

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Compromised tensorlake npm 0.5.144 delivered the Shai-Hulud worm to steal secrets and spread to other packages.

Socket and StepSecurity reported that tensorlake npm version 0.5.144 was compromised in the ChainDrop/Shai-Hulud campaign and later removed from the registry. A preinstall hook launched an obfuscated Bun loader that runs a self-propagating credential worm, Math_Symbol.js. The malware steals npm, GitHub, AWS, Vault, Kubernetes, SSH, cryptocurrency, and AI-assistant secrets, drops HackBrowserData, persists, and can execute remote code. It republishes infected packages, resolves C2 iseekaigogo.com through an Ethereum contract, stages data in public GitHub repositories, and may run a destructive PowerShell handler if a stolen GitHub token is revoked.

The Hacker Newsupdated 16:54 UTC · 6h agofirst 05:46 UTC · 17h agoMalware in the wild 6 sources2

Tensorlake

Timeline3 articles

Appears with

Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise

Hackers Hijack Tensorlake Package to Spread Shai-Hulud Supply Chain Malware

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm