Tensorlake NPM Compromise Exposes AI Development Supply Chain Vulnerabilities
In October 2026, the popular Tensorlake npm package was compromised in a sophisticated supply chain attack by the Shai-Hulud worm campaign. Attackers pushed malicious code to version 0.5.144 that harvested credentials from CI environments, Kubernetes clusters, AWS accounts, and developer workstations while establishing persistence and enabling remote code execution. The malware specifically targeted AI development infrastructure, stealing tokens from GitHub, npm, HashiCorp Vault, and configuration files from AI tools like Anthropic Claude and Cursor. The worm also propagated by republishing compromised versions of other packages associated with victims' publishing identities, extending the attack's reach across the JavaScript ecosystem. This incident highlights the growing threat to AI development supply chains as attackers increasingly target machine learning and AI agent infrastructure to extract valuable enterprise data and intellectual property.
Kill Chain
