Executive Summary
On October 7-8, 2026, the `tensorlake` npm package (v0.5.144) was compromised via a supply chain attack involving rogue commits and a malicious preinstall hook. The resulting 'Shai-Hulud' worm targets developer machines to harvest extensive credentials, including AWS, GitHub, npm and Kubernetes secrets, as well as configurations for AI development tools like Claude and Cursor.
A critical technical component of this campaign is a 'hostage token' monitor. Once a GitHub token is stolen, the malware installs a persistence mechanism that polls the GitHub API every 60 seconds. If the token is revoked before the monitor is removed, the malware is programmed to wipe the user's home directory. The worm also attempts to propagate by republishing other npm packages and modifying local repository configurations to infect subsequent users.
This campaign, identified as part of the broader 'ChainDrop' activity, poses a significant risk to the software supply chain and developer environments. Organizations using TensorLake or similar SDKs should immediately audit their environments, prioritizing the removal of the hostage monitor before rotating credentials to prevent data loss.