Malware & Ransomware
Shai-Hulud worm targets AI infrastructure via compromised Tensorlake npm package
The Shai-Hulud credential-stealing worm has expanded its reach to AI tools by hijacking the Tensorlake package on the npm registry.
Tensorlake
Everything Threat Times has reported about Tensorlake: 3 stories, newest first. Part of our Malware & Ransomware coverage.
Cyber Attacks
Compromised tensorlake npm package delivers Shai-Hulud credential-stealing worm
The tensorlake TypeScript SDK was hijacked in a supply chain attack, with version 0.5.144 distributing malware that steals credentials and executes remote code.
Data Breaches
Empire Market Co-Founder Sentenced to 40 Years; Tensorlake SDK Compromised
SecurityWeek reports a major sentencing for the Empire Marketplace, alongside news of a compromised npm package and exposed GPU telemetry data.