Cyber Intelligence

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Medium Severity Global
Date Occurred Oct 08, 2026 05:46 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded Oct 08, 2026
Full Description

The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud suppl

Original Source
https://thehackernews.com/2026/10/tensorlake-npm-package-compromised-to.html
Event Metadata
  • ID #37657
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed Oct 08, 2026
Quick Actions
Back to Events View on Globe Read Original Article

Related Events

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland
Oct 08, 2026 Medium Ireland
Ransomware recovery CEO charged over secret ransom payments
Oct 07, 2026 Medium
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
Oct 07, 2026 Medium
Hackers hijack Google domains after breaching ccTLD registries
Oct 07, 2026 Medium Ghana
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Oct 07, 2026 Medium Ghana
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Oct 07, 2026 Medium