TensorLake npm SDK Compromised in ChainDrop Shai-Hulud Credential-Stealing Attack

This campaign targets the TensorLake npm SDK version 0.5.144 by injecting obfuscated malicious code into the package. The payload activates during installation via a preinstall hook, harvesting a wide range of credentials including npm and GitHub tokens, AWS credentials, HashiCorp Vault secrets, Kubernetes configurations, SSH keys, and AI development tool credentials. Persistence is maintained through scheduled tasks, and the malware supports remote code execution. Command-and-control endpoints are resolved via an Ethereum smart contract, and a dead-man switch monitors stolen GitHub tokens to trigger destructive actions if tokens are revoked. The malware also propagates by republishing compromised package versions to other npm packages associated with the victim's publishing identity, effectively creating a worm that spreads through the npm ecosystem.

The attack compromises developer credentials and secrets across multiple platforms and services, potentially allowing attackers to access and control affected cloud resources, repositories, and infrastructure. The persistence and remote code execution capabilities increase the risk of prolonged unauthorized access. The dead-man switch mechanism can cause destructive outcomes if stolen tokens are revoked, and the worm-like propagation can rapidly extend the compromise across the npm ecosystem, affecting multiple projects and developers.

No official patch or remediation guidance is provided in the available data. Users should immediately stop using TensorLake npm SDK version 0.5.144 and audit their environments for compromised credentials. Rotate all potentially exposed tokens and keys, including npm, GitHub, AWS, HashiCorp Vault, Kubernetes, and SSH credentials. Monitor for suspicious scheduled tasks and unusual package republishing activity. Review and restrict publishing permissions in npm to prevent further propagation. Check the vendor advisory or official sources for updates and remediation instructions.