[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frnQYfIoZ5ln2euizfgWJxLUjC6LX90jZu1Se10wI-BI":3},{"article":4,"iocs":55,"watch_terms":66,"solutions":67,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"da5392f0-359e-4fe9-a137-bc66a6887b5a","Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm","tensorlake-npm-package-compromised-to-deliver-shai-hulud-credential-stealing-wor-a94793","The npm package known as \"tensorlake,\" a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop \u002F Shai-Hulud supply chain attack. The malicious version 0.5.144 \"contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,\" Socket said","The npm package 'tensorlake' (version 0.5.144) was compromised in a supply chain attack, delivering a credential-stealing worm named Shai-Hulud. The malware harvests credentials from various sources, establishes persistence, and can execute remote code. It propagates by re-publishing compromised versions and uses an Ethereum contract for C2 communication.","Tensorlake npm package compromised to deliver Shai-Hulud credential-stealing worm.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Ftensorlake-npm-package-compromised-to.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi1ZJrw-vCazDC3YJlfmY9WewJ170my9lYex6Ccg7VTa8UQCrXWoCiy_F9w_LoP-GDEarC_RoYnx63fAa_i_RmR5564MS6tgcoqi77wlcqPzX7kambOt4Gga7rsMlWWBwyHKZtCb1lAowiE4bf5up8aIJuwoVsZSKTq15TTynJ-uNPirAGnY8uwMMGqBsgU\u002Fs1600\u002Fnpm-hack.jpg","2026-10-08T05:46:20+00:00","2026-10-08T08:00:21.957567+00:00",9,[17,20,22,24,27,29],{"name":18,"type":19},"tensorlake","product",{"name":21,"type":19},"Bun",{"name":23,"type":19},"HackBrowserData",{"name":25,"type":26},"Kubernetes","technology",{"name":28,"type":26},"HashiCorp Vault",{"name":30,"type":31},"Shai-Hulud","threat_actor","26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":32,"icon":34,"name":35,"slug":36},null,"Supply Chain","supply-chain",[38,40,45,50],{"category":39},{"id":32,"icon":34,"name":35,"slug":36},{"category":41},{"id":42,"icon":34,"name":43,"slug":44},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,58,62],{"type":49,"value":30,"context":57},"Credential-stealing worm",{"type":59,"value":60,"context":61},"domain","iseekaigogo[.]com","Command-and-control (C2) endpoint",{"type":63,"value":64,"context":65},"mitre_attack","T1059.003","PowerShell execution via Invoke-Expression cmdlet",[18,21,23],{"controls":68,"vendors":155},[69,97,126],{"slug":70,"name":71,"problem":72,"products":73},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[74,81,89],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":28,"url":79,"description":80},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"github","GitHub","\u002Fvendor-logos\u002Fgithub.png","advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.",{"slug":98,"name":99,"problem":100,"products":101},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[102,110,118],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"slug":127,"name":128,"problem":129,"products":130},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[131,139,147],{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"sonatype","Sonatype","\u002Fvendor-logos\u002Fsonatype.png","sonatype-firewall","Sonatype Firewall","https:\u002F\u002Fwww.sonatype.com\u002Fproducts\u002Fsonatype-firewall","Blocks malicious and policy-violating open-source components at download.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"jfrog","JFrog","\u002Fvendor-logos\u002Fjfrog.png","jfrog-curation","JFrog Curation","https:\u002F\u002Fjfrog.com\u002Fcuration\u002F","Blocks malicious and risky open-source packages before they enter your repositories.",{"vendor_slug":148,"vendor_name":149,"vendor_logo":150,"product_slug":151,"product_name":152,"url":153,"description":154},"snyk","Snyk","\u002Fvendor-logos\u002Fsnyk.png","snyk-open-source","Snyk Open Source","https:\u002F\u002Fsnyk.io\u002Fproduct\u002Fopen-source-security-management\u002F","Finds and fixes vulnerable open-source dependencies in code and pipelines.",[156],{"slug":157,"name":158,"logo_path":159,"roles":160},"socket","Socket","\u002Fvendor-logos\u002Fsocket.png",[161],"reported_by",{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":177},"compromised-npm-package-delivers-self-propagating-credential-stealing-worm","Compromised npm Package Delivers Self-Propagating Credential-Stealing Worm","The tensorlake npm package was poisoned in a classic open-source supply chain attack, injecting a self-replicating worm (Shai-Hulud) that steals credentials, establishes persistence, and executes remote code on victim machines. What makes this attack particularly dangerous is the worm's ability to re-publish itself to npm, amplifying the blast radius far beyond the initial compromise. The use of an Ethereum smart contract for command-and-control (C2) communication is a novel evasion technique that makes traditional domain-based blocking ineffective. This incident underscores the implicit trust developers place in third-party packages and the catastrophic consequences when that trust is exploited.",[167,168,169,170,171,172,173,174,175,176],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 16: Application Software Security","NIST SP 800-161: Supply Chain Risk Management Practices","NIST SP 800-53 SA-12: Supply Chain Protection","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST SP 800-53 AU-12: Audit Record Generation","NIST Cybersecurity Framework DE.CM-3: Personnel Activity Monitoring","SLSA Framework: Supply Chain Levels for Software Artifacts (Level 3+)","OpenSSF Scorecard: Dependency Update Tool and Token Permissions checks","GDPR Article 32: Security of Processing (if EU user credentials were harvested)",{}]