Malware & Ransomware
Shai-Hulud worm targets AI infrastructure via compromised Tensorlake npm package
The Shai-Hulud credential-stealing worm has expanded its reach to AI tools by hijacking the Tensorlake package on the npm registry.
Shai-Hulud
Everything Threat Times has reported about Shai-Hulud: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Cyber Attacks
Compromised tensorlake npm package delivers Shai-Hulud credential-stealing worm
The tensorlake TypeScript SDK was hijacked in a supply chain attack, with version 0.5.144 distributing malware that steals credentials and executes remote code.