Reported by 7 outlets
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Why this score
- Breadth
- 2.00 / 2.0 · 7 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 0.80 / 5.0 · CVSS + content signals
- Velocity
- 0.50 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.55 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 3.1 / 10 = base × recency + community
Desk analysis
The story tracks tensorlake npm package compromised to deliver shai hulud credent. Key details from source events include: The popular Tensorlake SDK (part of a project with 1,000+ GitHub stars) shipped a poisoned release ( v.0.5.144) that was infected with the self-propagating Shai-Hulud worm. The malicious version was published through the project's legitimate GitHub Actions release pipeline, complete with valid SLSA ...
This matters because it reflects active threats or confirmed vulnerabilities affecting real systems. Readers should watch for patches, indicators of compromise, and vendor confirmations.
Source events suggest 8 reports with a peak score of 5.5. No invented claims beyond the read content.
Timeline
-
original reporting
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
thehackernews.com · 5d ago · October 8th, 2026
The popular Tensorlake SDK (part of a project with 1,000+ GitHub stars) shipped a poisoned release ( v.0.5.144) that was infected with the self-propagating Shai-Hulud worm. The malicious version was published through the project's legitimate GitHub Actions release pipeline, complete with valid SLSA provenance. The attacker poisoned main first, then let the trusted pipeline do the rest. This is a well-known Shai-Hulud pattern which a single, simple YARA rule flags in milliseconds. In fact a basic rule matched it on the first pass in our own pipeline. If npm and Github ran even a basic YARA scan on packages before publishing, most of these campaigns would be stopped before a single developer is infected. 0.5.144 has been removed from npm and version 0.5.143 is clean. If you installed 0.5.144
via reddit r/cybersecurity: Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
-
update from safedep.io
(safedep.io) Compromised tensorlake npm Package Deploys Mini Shai-Hulud Worm in Supply Chain Attack In brief - This article describes a supp
safedep.io · 5d ago · October 8th, 2026
(safedep.io) Compromised tensorlake npm Package Deploys Mini Shai-Hulud Worm in Supply Chain Attack In brief - This article describes a supp
via Mastodon https://safedep.io/tensorlake-npm-compromise-mini-shai-hulud
-
mentioned by zubiqo.com
The tensorlake npm package (v0.5.144) was compromised by the Shai-Hulud worm to harvest Kubernetes and Vault credentials. It writes directly
zubiqo.com · 5d ago · October 8th, 2026
-
update from ifin.network
The Shai-Hulud style attack on tensorlake has a nasty trick up its sleeve: try to cycle the stolen token, and it'll blow away your home fold
ifin.network · 5d ago · October 8th, 2026
The Shai-Hulud style attack on tensorlake has a nasty trick up its sleeve: try to cycle the stolen token, and it'll blow away your home fold
via Mastodon https://ifin.network/t/tensorlake-supply-chain-attack-comes-with-booby-trap/890
-
mentioned by thecybersecguru.com
🚨 Tensorlake npm Package Compromised by Shai-Hulud Worm The `tensorlake@0.5.144` npm release was compromised with a Shai-Hulud worm variant
thecybersecguru.com · 5d ago · October 8th, 2026
-
update from malware.news
Hijacked TensorLake npm Turned Install Into Credential Risk
malware.news · 5d ago · October 8th, 2026
TL;DR A malicious release of TensorLake's TypeScript SDK, tensorlake@0.5.144, used an install hook to search for developer credentials and accept remote commands. Sonatype's code review found that its GitHub fallback could create a public repository and commit collected data, including a stolen GitHub token in one path, and that the malware could modify accessible repositories by committing .claude and .vscode files. The loader exits under several common CI environment markers, so the payload's separate GitHub Actions logic does not establish broad CI infection. We have not confirmed that stolen data was published, repositories were modified, or downstream systems were affected. Anyone who installed the release should determine whether the hook ran, investigate the host and accessible GitHub repositories, and review credentials available to the process. A Malicious Install Hook Launches the Payload The affected npm release included a preinstall hook that starts an obfuscated JavaScript payload through Bun. The package can download Bun 1.3.13 if it is not already available. The TensorLake TypeScript SDK's documented purpose is to work with sandboxes, repositories, and cloud services. Credential collecti
-
update from www.sonatype.com
(sonatype.com) Malicious TensorLake npm Package Hijacks Installations to Steal Credentials and Execute Remote Commands In brief - This artic
www.sonatype.com · 5d ago · October 8th, 2026
(sonatype.com) Malicious TensorLake npm Package Hijacks Installations to Steal Credentials and Execute Remote Commands In brief - This artic
via Mastodon https://www.sonatype.com/blog/hijacked-tensorlake-npm-turned-install-into-credential-risk
-
update from thehackernews.com
🚨 The npm package tensorlake (v0.5.144) was compromised in a supply chain attack. It contains malware that steals secrets, harvests credenti
thehackernews.com · 21h ago · October 13th, 2026
It contains malware that steals secrets, harvests credenti
via Mastodon https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html