A Shai-Hulud (ChainDrop-linked) worm variant reached AI agent infrastructure when tensorlake npm SDK version 0.5.144 was published through a compromised maintainer account. Socket flagged the credential-stealing payload 11 minutes after publication, the version was live for about 1 hour 40 minutes…

[Version française de cet article] Remember Will Smith eating spaghetti? Late March 2023, a Reddit user called chaindrop posts a 19-second clip made with ModelScope, an open-source text-to-video model...

Vous vous souvenez de Will Smith qui mange des spaghettis ? Fin mars 2023, un utilisateur de Reddit nommé chaindrop poste un clip de 19 secondes généré avec ModelScope, un modèle text-to-video open…

Depuis septembre 2025, les compromissions de paquets npm se sont multipliées : Shai-Hulud, axios, Mastra, ChainDrop. Retour sur un an et demi d’attaques, les propriétés de l’écosystème node qui les rendent possibles, et les mesures concrètes (délai avant installation, blocage des scripts,

Tensorlake npm SDK 0.5.144 was compromised in a ChainDrop supply chain attack, delivering an obfuscated credential-stealing worm via a preinstall script.

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code," Socket said

Groups Conversations All groups and messages Sign in     TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack 0 views Eyal Estrin unread, 2:03 PM (1 hour ago)    to https://socket.dev/blog/tensorlake-compromise Eyal Estrin Author | Cloud Architect | AWS • Azure • GCP Insights Social: @eyalestrin Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com Reply all Reply to author Forward

Threat actors are increasingly using blockchain networks as resilient command-and-control infrastructure to steal cloud credentials from developer endpoints and CI/CD environments.

Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code," Socket said

The Shai-Hulud worm compromised the Tensorlake npm package and hundreds of others, stealing credentials and targeting AI infrastructure in a major supply chain attack.

The North Korean hacking group Alluring Pisces is using public blockchains for command-and-control (C2) in cloud supply chain attacks, making them highly...

The npm package "tensorlake," a TypeScript software development kit for Tensorlake applications, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack, based on information published...

攻撃者は、開発者のエンドポイントやCI/CD環境からクラウドの認証情報を盗み出すため、耐障害性の高いコマンド&コントロール（C2）基盤としてブロックチェーンネットワークを利用するケースを増やしています。 最近確認された、npmワーム「ChainDrop」と、北朝鮮との関連が指摘される「PolinRider」の攻撃キャ

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code," Socket said

Palo Alto Networks Unit 42 has documented two campaigns — ChainDrop and PolinRider — that use Ethereum and multi-chain TRON, Aptos, and BSC smart contracts for command-and-control of supply-chain malware targeting enterprise cloud environments.