supply-chain
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
Medium
Summary
A compromised npm package named ‘tensorlake’ has been used in a ChainDrop/Shai-Hulud supply chain attack to deliver a credential-stealing worm. Users are advised to remove the package and rotate their credentials immediately.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data