Tensorlake npm Package Compromised by Shai-Hulud Worm

• •Version 0.5.144 of Tensorlake contains a credential-stealing worm that executes on install.
• •The malware uses a preinstall hook to run an obfuscated loader that harvests sensitive credentials.
• •Users are advised to treat any machine that installed the compromised version as fully compromised.

On October 8, 2026, the Tensorlake npm package version 0.5.144 was compromised, delivering a credential-stealing worm known as Shai-Hulud. The malware, which was published through a compromised maintainer account, executes a preinstall hook that runs an obfuscated loader to harvest credentials from local files and CI environments. It also establishes persistence and attempts to propagate through connected supply chains. The malicious version was flagged shortly after publication, and npm has since removed it. Users who installed this version are advised to treat their machines as compromised and rotate all credentials. The attack is part of a broader trend of supply chain vulnerabilities affecting popular development tools.