07:36
2026-10-08
swapupdate.in
ai-safety
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The Tensorlake TypeScript SDK npm package was compromised in a ChainDrop / Shai-Hulud supply chain attack, with malicious version 0.5.144 harvesting credentials, exfiltrating secrets, establishing per…