The popular Tensorlake SDK, a package with more than 12,000 weekly downloads, shipped a poisoned release (version 0.5.144 ) that was infected with the self-propagating Shai-Hulud worm.
Tensorlake npm package compromised by Shai-Hulud in latest software supply chain attack | Blog | Endor Labs
calendar_today
October 8, 2026
domain
endor-labs