Tensorlake npm Package Compromised to Spread Shai

Cybersecuritynews •Tushar Subhra Dutta • October 8, 2026

A malicious release of the Tensorlake npm package has been published with a Shai-Hulud worm variant that can steal developer secrets and attempt to spread through connected software supply chains. The affected version, [email protected], was released on October 8, 2026. Tensorlake is a serverless sandbox platform for AI agents, and its npm package has recorded […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Tensorlake npm Package Compromised by Shai-Hulud Worm On October 8, 2026, the Tensorlake npm package version 0.5.144 was compromised, delivering a credential-stealing worm known as Shai-Hulud. The malware, which was published through a compromised maintainer account, executes a preinstall hook that runs an obfuscated loader to harvest credentials from local files and CI environments. It also establishes persistence and attempts to propagate through connected supply chains. The malicious version was flagged shortly after publication, and npm has since removed it. Users who installed this version are advised to treat their machines as compromised and rotate all credentials. The attack is part of a broader trend of supply chain vulnerabilities affecting popular development tools. 13 sources 72

Tensorlake npm Package Compromised to Spread Shai

The full story

Extracted Entities

Attack Types (1)

Malware (1)