Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Summary: The npm package tensorlake, a TypeScript SDK for Tensorlake applications, sandboxes, and cloud services, was compromised in a ChainDrop / Shai-Hulud supply chain attack through malicious version 0.5.144, which is no longer available for download. Socket's analysis found the release carries a preinstall hook that launches an obfuscated loader running a credential-stealing, self-propagating worm on the Bun runtime, harvesting credentials from local files, CI environments, Kubernetes, and Vault, dropping the HackBrowserData binary, and republishing compromised packages under the victim's publishing identity with Sigstore provenance.
Key Takeaway: The worm includes a "hostage token" component that polls api.github.com/user with the stolen GitHub token and, if the token is revoked, runs an attacker-supplied handler via Invoke-Expression to wipe the home directory - so the obvious remediation step can trigger data destruction.
Read the original at The Hacker News ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026