The Tensorlake npm package was compromised in a ChainDrop/Shai-Hulud attack, allowing the distribution of a credential-stealing worm.

Version 0.5.144 of the Tensorlake npm SDK was compromised in a ChainDrop supply chain attack delivering an obfuscated credential-stealing worm. The compromised package executes via an npm preinstall hook without requiring developers to import the module or run an agent. Once installed, the malware harvests developer secrets, cloud tokens, Kubernetes keys, HashiCorp Vault data, and configuration files for tools including Claude, Cursor, Windsurf, and Zed. To ensure propagation, the worm signs and publishes releases under the victim's npm identity using Sigstore provenance. The intrusion also installs a persistent monitoring utility that polls the GitHub API. If security teams revoke the stolen GitHub credential while the background service is running, a destructive dead-man switch wipes the user's home directory. How can incident response playbooks effectively prevent dead-man switch triggers when dealing with unknown local persistence? https://www.developer-tech.com/news/chaindrop-supply-chain-attack-injects-credential-stealing-worm-into-tensorlake-sdk/ #DevSecOps #Infosec #Cybersecurity #OpenSource #Developers

🚨 Tensorlake’s npm SDK (12K weekly downloads) was compromised in a ChainDrop / Shai-Hulud attack. Version 0.5.144 contains a credential-stealing worm with a dead-man switch designed to execute attacker code when a stolen GitHub token is revoked. https://socket.dev/blog/tensorlake-compromise

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html