TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
- Product
- tensorlake npm SDK
- Affected
- tensorlake 0.5.144
- Fixed in
- No fix yet
Last verified against sources: October 26, 2026
Am I affected?
tensorlake npm SDK: affected tensorlake 0.5.144. No fix has been reported yet.
- Check your version: run
npm ls tensorlake. Versions 0.5.144 of tensorlake are affected. [1]
What to do now
- Remove the package if it is installed: run
npm uninstall tensorlake. [1] - Teams using Tensorlake should check dependency manifests, lockfiles, build logs, and deployed artifacts for tensorlake@0.5.144. [1]
- Block the affected version and prevent further installation. [1]
- Remove the token monitor before revoking any tokens. [1]
- Only after the previous step revoke and replace exposed credentials. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- Version 0.5.144 contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code. [1]
- The malicious version was published on October 8, 2026, at 01:12:07 UTC. [1]
- The affected release's published package manifest contains a preinstall hook: "preinstall": "node lib/setup.mjs". [1]
- Socket flagged two files in the published package: package/lib/setup.mjs and package/lib/Math_Symbol.js. [1]
Impact
- The payload is a broad credential stealer and self-propagating worm. [1]
- Any secrets accessible to the executing process may be exposed, and persistence can retain attacker access after the affected dependency is removed. [1]
- When the token is revoked, the monitor executes an attacker-supplied handler through Invoke-Expression. [1]
- Revoking the stolen GitHub token while the monitor is still running triggers the dead-man switch to wipe the user's home directory, regardless of where the revocation is done. [1]
What was done
Sources
- news:socket:socket:7765f6bc5cd22127 — Socket
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack
Product: tensorlake npm SDK | Affected: tensorlake 0.5.144 | Fixed in: No fix yet
Summary: Version 0.5.144 contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/10/news-socket-socket-7765f6bc5cd22127-tensorlake-npm-sdkCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for tensorlake npm SDK
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.