Product
high
advisory
Malicious TensorLake npm SDK Hijacks Developer Environments
1 rule 2 TTPsA malicious npm release of the TensorLake TypeScript SDK (v0.5.144) uses a preinstall hook to exfiltrate developer credentials and AI-tool configurations while maintaining remote command execution capabilities.
tensorlake +2
supply-chain
npm
credential-theft
javascript
1r
2t
high
advisory
Shai-Hulud Campaign Activity
20 IOCsTracking brief for the Shai-Hulud campaign; individual sightings are folded in as reported.
jscrambler 8.14.0 +102
campaign
shai-hulud
20i
updated
critical
threat
Shai-Hulud Malware Used in Supply Chain Attack via Compromised npm Packages
3 rules 7 TTPs 3 IOCsThe Shai-Hulud malware was used in a large-scale software supply-chain attack compromising hundreds of packages across open-source software ecosystems by compromising developer secrets and CI/CD pipelines.
router +11
TeamPCP
supply-chain
supply-chain-attack
npm
pypi
credential-theft
shai-hulud
3r
7t
3i