TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack

Socket detected a compromised release of the tensorlake npm SDK (version 0.5.144) as part of the ongoing ChainDrop / Shai-Hulud supply chain attack campaign. The malicious version was published on October 8, 2026 and flagged by Socket just 11 minutes later. It uses a preinstall hook to execute obfuscated malware that harvests credentials from npm, GitHub, AWS, Kubernetes, HashiCorp Vault, SSH keys, .env files, and AI development tools. The payload is a self-propagating worm that spreads by republishing compromised versions to other packages under the victim's npm identity. Command-and-control endpoints are resolved dynamically via an Ethereum smart contract rather than hardcoded domains. A 'dead man's switch' monitors stolen GitHub tokens and executes attacker-supplied code upon token revocation, with threats to wipe the victim's computer. The attack pattern matches previously documented Shai-Hulud compromises of keyv, cacheable, and related packages. Teams using tensorlake@0.5.144 are advised to treat affected hosts as compromised, revoke credentials, and audit connected accounts.