Executive Summary
On October 8, 2026, a malicious version of the Tensorlake npm package (0.5.144) was released following a compromise of the project's GitHub repository. The infection deploys a new variant of the Shai-Hulud worm, which is triggered automatically via a preinstall script. The worm is designed to steal sensitive developer data, including cloud access keys, CI/CD secrets, and cryptocurrency wallet information from browser extensions.
Technically, the malware exhibits high evasion by downloading and executing the Bun JavaScript runtime to run its primary payload, bypassing security tools focused on Node.js. It also utilizes a resilient command-and-control (C2) mechanism by querying an Ethereum smart contract for updated exfiltration endpoints. Notably, the malware contains a 'dead-man's switch' that may trigger data destruction on the host if associated GitHub tokens are revoked before isolation.
This incident highlights a significant supply-chain risk for AI-focused development teams. With over 100,000 installs, the Tensorlake package serves as a high-value vector for lateral movement into corporate cloud environments and software publishing pipelines. Organizations are urged to audit build systems and developer workstations for the presence of this specific version and rotate all potentially exposed credentials immediately.