Executive Summary
On October 8, 2026, a malicious version of the popular TypeScript SDK 'tensorlake' (version 0.5.144) was published to the npm registry. This release was infected with a variant of the Shai-Hulud worm, a self-propagating malware family that targets developers' credentials and AI agent frameworks. The compromise originated from verified commits on the official GitHub repository, likely indicating a hijacked maintainer account.
The malware functions by executing an obfuscated preinstall script that drops a secondary payload to harvest environment variables, cloud secrets (AWS, GCP, Azure), SSH keys, and browser-stored credentials. Notably, this variant introduced specific logic to target 14 cryptocurrency browser extensions and utilizes an Ethereum smart contract as a 'dead-drop' mechanism to resolve its Command and Control (C2) infrastructure.
This incident is high-impact due to the worm's 'dead-man's switch' logic: if its embedded stolen GitHub token is revoked before the persistence mechanism is disabled, the malware executes a recursive deletion of the user's home directory. Any organization that installed the affected version must treat local environments and CI/CD runners as fully compromised.